GHSA-236W-P7WF-5PH8 vulnerabilities

Vulnerabilities for packages: gitlab-pages, yq, tekton-chains, aws-flb-firehose, cass-operator, kubewatch, stern, gke-gcloud-auth-plugin, kargo, nri-prometheus, timestamp-authority, local-static-provisioner, wire-go, cilium-cli, kubernetes-csi-external-attacher, task, wave, paranoia, k8ssandra-operator, fq, ferretdb, kubernetes-dashboard-metrics-scraper, rclone, neuvector-sigstore-interface, istio-operator, nri-couchbase, kubernetes-event-exporter, nri-nginx, gobuster, dask-gateway, litestream, spegel, trust-manager, consul, dgraph, gitleaks, docker-credential-ecr-login, nri-kafka, addon-resizer, k9s, protoc-gen-go, volume-modifier-for-k8s, coredns, kots, vexctl, gostatsd, vault-k8s, rabbitmq-cluster-operator, gcsfuse, flux-notification-controller, oauth2-proxy, src-fingerprint, skopeo, terraform, fuse-overlayfs-snapshotter, nri-cassandra, flux-kustomize-controller, metallb, nvidia-device-plugin, ksops, logstash-exporter, pulumi-language-dotnet, gomplate, conftest, snyk-cli, fulcio, prometheus-stackdriver-exporter, newrelic-nri-kube-events, helm-operator, redka, cadvisor, go-bindata, prometheus-alertmanager, docker-credential-gcr, etcd, trivy, istio-pilot-discovery, nri-mssql, gitsign, ctop, cert-manager-webhook-pdns, kubernetes-dashboard, crossplane, influxd, oras, kind, neuvector-controller, kyverno-policy-reporter-ui, telegraf, nri-nagios, mods, helm, doppler-kubernetes-operator, flux-source-controller, kubernetes-csi-node-driver-registrar, nvidia-container-toolkit, kubeadm-controlplane-controller, kyverno-policy-reporter-kyverno-plugin, lazygit, nri-mongodb, sbom-scorecard, kuberay-operator, chezmoi, nodetaint, s5cmd, grpcurl, ollama, step-issuer, cloud-sql-proxy, glab, cortex, kube-bench, aws-flb-kinesis, kubernetes-dns-node-cache, docker-credential-acr-env, gobump, ipfs, jitsucom-bulker, cluster-autoscaler, neuvector-dbgen, prometheus-mysqld-exporter, nri-elasticsearch, tflint, pombump, nri-apache, flannel, opentofu, kubernetes-csi-livenessprobe, newrelic-nri-statsd, xcaddy, neuvector-agent, haproxy-ingress, kubernetes-csi-external-provisioner, logstash, kube-vip, hcloud, fluent-bit-plugin-loki, rekor, speedtest-go, kaf, metacontroller, amass, weaviate, regclient, datadog-agent, git-lfs, kubernetes-csi-external-resizer, node-feature-discovery, vault-csi-provider, terraform-docs, nri-redis, local-path-provisioner, prometheus-elasticsearch-exporter, gitlab-shell, nri-consul, cfssl, gitlab-kas, gosu, rootlesskit, trillian, traefik, harbor, crossplane-provider-aws, rook, velero, docker, influx, litefs, kube-fluentd-operator, tailscale, opa, govulncheck, golangci-lint, docker-compose, flux-image-automation-controller, zarf, tempo, prometheus-redis-exporter, frp, prometheus, node-problem-detector, terraform-provider-aws, loki, cri-tools, confluent-common-docker, mockery, clusterctl, cluster-proportional-autoscaler, policy-controller, kwok, k8sgpt, crossplane-provider-azure, kubeflow-katib, terraform-provider-google, dex, secrets-store-csi-driver-provider-azure, scorecard, pulumi-kubernetes-operator, spicedb, skaffold, kubernetes-ingress-defaultbackend, nri-jmx, terraform-provider-azurerm, cert-exporter, kafka_exporter, cni-plugins, velero-plugin-for-csi, jaeger-agent, yam, bom, actions-runner-controller, runc, aws-flb-cloudwatch, crossplane-provider-gcp, buildah, chartmuseum, wireguard-go, dynamic-localpv-provisioner, mage, tekton-pipelines, kaniko, secrets-store-csi-driver, step-ca, prometheus-statsd-exporter, nfs-subdir-external-provisioner, flux-image-reflector-controller, prometheus-pushgateway, flyte, kyverno, tkn, overmind, aactl, aws-load-balancer-controller, capslock, gpu-feature-discovery, thanos-operator, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-snapshotter, terragrunt, grafana, fluent-operator, istio-pilot-agent, controller-gen, dagdotdev, harbor-registry, prometheus-adapter, direnv, tfsec, nsc, kubecolor, newrelic-infrastructure-agent, kube-logging-operator, slsa-verifier, helm-push, kubeadm-bootstrap-controller, gh, kubebuilder, newrelic-prometheus-configurator, harbor-cli, up, memcached-exporter, helm-docs, istio-cni, falcosidekick, prometheus-bind-exporter, temporal, kyverno-policy-reporter, kube-state-metrics, prometheus-nats-exporter, boring-registry, gitness, dagger, spqr, sops, pulumi-language-java, cosign, ko, swagger, nri-memcached, kpt, aws-ebs-csi-driver, k3s, rabbitmq-default-user-credential-updater, wgcf, nri-postgresql, configmap-reload, q, dockerize, grafana-operator, nri-haproxy, kubevela, vcluster, kubernetes-csi-driver-hostpath, velero-plugin-for-aws, ip-masq-agent, go-md2man, minify, flannel-cni-plugin, nerdctl, prometheus-postgres-exporter, delve, prometheus-mongodb-exporter, render-template, prometheus-operator, hey, bank-vaults, nri-f5, go-fips, gitlab-logger, nats, osv-scanner, petname, syft, ghaudit, kubernetes, sigstore-scaffolding, hubble-ui, gitlab-runner, rabbitmq-messaging-topology-operator, sbomqs, cluster-api-controller, hello-world-golang, octo-sts, restic, sonobuoy, postgres-operator, protoc-gen-go-grpc, karpenter, grafana-agent-operator, nri-rabbitmq, flux-helm-controller, secrets-store-csi-driver-provider-aws, grpc-health-probe, harbor-scanner-trivy, crane, go, certificate-transparency, nats-server, nri-mysql, age, wait-for-port, wazero, tctl, teleport, step, kafka-proxy, grafana-rollout-operator, pluto, go-licenses, spire-server, mc, temporal-ui-server, kustomize, prometheus-blackbox-exporter, dataplaneapi, external-dns, dive, cloudflared, atlantis, mkcert, grype, kubescape, prometheus-beat-exporter, wolfictl, nri-kubernetes, metrics-server, cert-manager, libnvidia-container, extism, shfmt, vt-cli, bazelisk, http-echo, mongo-tools, buildkitd, src, caddy, newrelic-infra-operator, k3d, hivemind, buf, ytt, keda, falcoctl, prometheus-node-exporter, grafana-mimir, gatekeeper, croc, neuvector-scanner, supercronic, smarter-device-manager, gops, nri-discovery-kubernetes, thanos, php-fpm_exporter, flux, timoni, argo-workflows, ingress-nginx-controller, cilium