GHSA-42CJ-99W8-CP2P vulnerabilities

Vulnerabilities for packages: cortex, pulumi-language-yaml, thanos...