GHSA-V6V8-XJ6M-XWQH vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, cert-manager, flux-image-reflector-controller, buildkitd, ksops, policy-controller, kubevela, terraform, gitsign, vault-csi-provider, cosign, flux-helm-controller, prometheus, fulcio, zot, aactl, keda, gh, vexctl, glab, tkn, bank-vaults, tekton-pipelines, flux-kustomize-controller, flux, external-dns, gitlab-runner, k3s, pulumi, rekor, spire-server, argo-cd, zarf, sops, nuclei, terragrunt, kubernetes-event-exporter, snyk-cli, timestamp-authority, k3d, consul, flux-source-controller, opentelemetry-collector-contrib, scorecard, skopeo, flux-image-automation-controller, slsa-verifier, gomplate, kargo, loki, neuvector-sigstore-interface, rook, terraform-provider-azurerm, goreleaser, kubescape, actions-runner-controller, gitlab-shell, guac, kyverno, rabbitmq-messaging-topology-operator, tekton-chains, falcoctl, opentofu, step-ca, influxd, grafana-mimir, flux-notification-controller, crossplane-provider-azure, sigstore-scaffolding, gitlab-kas