GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: bom, gitlab-pages, kube-bench, runc, hey, vertical-pod-autoscaler, bank-vaults, crossplane-provider-gcp, tekton-chains, kubernetes-dns-node-cache, docker-credential-acr-env, gobump, kubewatch, go-fips, stern, gke-gcloud-auth-plugin, chartmuseum, wireguard-go, ipfs, jitsucom-bulker, nri-prometheus, osv-scanner, dynamic-localpv-provisioner, mage, local-static-provisioner, petname, tigera-operator, wire-go, tekton-pipelines, prometheus-mysqld-exporter, ghaudit, cilium-cli, kubernetes-csi-external-attacher, wave, kubernetes, secrets-store-csi-driver, step-ca, paranoia, prometheus-statsd-exporter, hubble-ui, gitlab-runner, ferretdb, nfs-subdir-external-provisioner, flux-image-reflector-controller, pombump, kubernetes-dashboard-metrics-scraper, rclone, flannel, istio-operator, flyte, kubernetes-csi-livenessprobe, newrelic-nri-statsd, guac, kyverno, hello-world-golang, overmind, kubernetes-csi-external-provisioner, logstash, aactl, sonobuoy, capslock, melange, hcloud, containerd, rekor, kaf, secrets-store-csi-driver-provider-gcp, kubernetes-csi-external-snapshotter, karpenter, grafana-agent-operator, dask-gateway, litestream, metacontroller, secrets-store-csi-driver-provider-aws, spegel, trust-manager, harbor-scanner-trivy, dgraph, gitleaks, crane, go, certificate-transparency, nats-server, harbor-registry, docker-credential-ecr-login, regclient, prometheus-adapter, git-lfs, k9s, kubernetes-csi-external-resizer, node-feature-discovery, volume-modifier-for-k8s, direnv, wait-for-port, external-secrets-operator, terraform-docs, tfsec, coredns, local-path-provisioner, step, kubecolor, gostatsd, vault-k8s, aws-efs-csi-driver, grafana-rollout-operator, cfssl, go-licenses, helm-push, flux-notification-controller, kubeadm-bootstrap-controller, oauth2-proxy, mc, gosu, kubebuilder, src-fingerprint, skopeo, rootlesskit, kustomize, newrelic-prometheus-configurator, fuse-overlayfs-snapshotter, trillian, flux-kustomize-controller, harbor-cli, nvidia-device-plugin, traefik, ksops, eksctl, external-dns, logstash-exporter, dive, pulumi-language-dotnet, multus-cni, harbor, cloudflared, crossplane-provider-aws, gomplate, atlantis, conftest, falcosidekick, snyk-cli, fulcio, mkcert, influx, prometheus-bind-exporter, litefs, prometheus-stackdriver-exporter, helm-operator, kube-state-metrics, kubescape, redka, cadvisor, go-bindata, prometheus-beat-exporter, prometheus-nats-exporter, boring-registry, prometheus-alertmanager, docker-credential-gcr, opa, etcd, golangci-lint, cert-manager, docker-compose, gitness, govulncheck, libnvidia-container, metrics-server, extism, shfmt, spqr, tempo, sops, prometheus-redis-exporter, vt-cli, frp, http-echo, spark-operator, cosign, ko, mongo-tools, buildkitd, src, caddy, zot, newrelic-infra-operator, k3d, ctop, cri-tools, kpt, aws-ebs-csi-driver, cert-manager-webhook-pdns, confluent-common-docker, kubernetes-dashboard, loki, mockery, crossplane, trivy, clusterctl, policy-controller, oras, render-template, kind, rabbitmq-default-user-credential-updater, kyverno-policy-reporter-ui, falcoctl, wgcf, telegraf, kwok, k8sgpt, mods, croc, crossplane-provider-azure, neuvector-scanner, pulumi-language-yaml, configmap-reload, helm, flux-source-controller, q, dockerize, grafana-operator, dex, secrets-store-csi-driver-provider-azure, nvidia-container-toolkit, kyverno-policy-reporter-kyverno-plugin, lazygit, scorecard, pulumi-kubernetes-operator, smarter-device-manager, gops, spicedb, thanos, php-fpm_exporter, skaffold, kubernetes-csi-driver-hostpath, kubernetes-ingress-defaultbackend, ip-masq-agent, cert-exporter, go-md2man, timoni, cue, kafka_exporter, s5cmd, jaeger-agent, delve, grpcurl, glab, cortex