GHSA-42CJ-99W8-CP2P vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, thanos, cortex...