GHSA-4374-P667-P6C8 vulnerabilities

Vulnerabilities for packages: bom, gitlab-pages, prometheus-operator, yq, runc, hey, vertical-pod-autoscaler, bank-vaults, tekton-chains, kubernetes-dns-node-cache, hugo, kubewatch, gke-gcloud-auth-plugin, chartmuseum, nats, wireguard-go, nri-prometheus, stakater-reloader, cluster-autoscaler, dynamic-localpv-provisioner, apko, prometheus-mysqld-exporter, kubernetes-csi-external-attacher, pulumi, secrets-store-csi-driver, sigstore-scaffolding, prometheus-statsd-exporter, gitlab-runner, nfs-subdir-external-provisioner, flux-image-reflector-controller, kubernetes-dashboard-metrics-scraper, prometheus-pushgateway, istio-operator, opentofu, kubernetes-csi-livenessprobe, kyverno, haproxy-ingress, tkn, kubernetes-csi-external-provisioner, aactl, aws-load-balancer-controller, gobuster, thanos-operator, containerd, rqlite, kaf, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-snapshotter, karpenter, metacontroller, flux-helm-controller, trust-manager, consul, dgraph, go, istio-pilot-agent, amass, weaviate, vault, k8sgpt-operator, prometheus-adapter, git-lfs, kubernetes-csi-external-resizer, vault-csi-provider, external-secrets-operator, coredns, kots, tctl, prometheus-elasticsearch-exporter, argo-cd, gitlab-shell, newrelic-infrastructure-agent, vault-k8s, aws-efs-csi-driver, kube-logging-operator, slsa-verifier, flux-notification-controller, oauth2-proxy, mc, terraform, fuse-overlayfs-snapshotter, prometheus-blackbox-exporter, trillian, flux-kustomize-controller, nvidia-device-plugin, minio, external-dns, up, dive, pulumi-language-dotnet, memcached-exporter, crossplane-provider-aws, falco, istio-cni, gomplate, atlantis, prometheus-bind-exporter, prometheus-stackdriver-exporter, kube-fluentd-operator, kube-state-metrics, kubescape, prometheus-alertmanager, metrics-server, flux-image-automation-controller, gitness, istio-pilot-discovery, frp, prometheus, node-problem-detector, pulumi-language-java, spark-operator, cosign, goreleaser, buildkitd, src, caddy, zot, k3d, kpt, aws-ebs-csi-driver, kubernetes-dashboard, keda, influxd, k3s, kind, falcoctl, telegraf, prometheus-node-exporter, k8sgpt, gatekeeper, crossplane-provider-azure, pulumi-language-yaml, kubeflow-katib, helm, flux-source-controller, dex, kubernetes-csi-node-driver-registrar, pulumi-kubernetes-operator, kubevela, thanos, skaffold, kubernetes-ingress-defaultbackend, flux, timoni, nodetaint, cue, prometheus-postgres-exporter, grpcurl, ollama, cloud-sql-proxy, prometheus-mongodb-exporter