GHSA-42CJ-99W8-CP2P vulnerabilities

Vulnerabilities for packages: thanos, pulumi-language-yaml, cortex...