GO-2026-4603 vulnerabilities

Vulnerabilities for packages: prometheus-blackbox-exporter-fips, logstash, crossplane-provider-aws-firehose-fips, prometheus-postgres-exporter, policy-bot, argo-cd, cerbos, terragrunt-fips, kubernetes-dashboard-fips, aws-flb-firehose-fips, kubescape-operator-fips,...

GO-2025-3828 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, kubeflow-katib...

GO-2025-3750 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, go, kubeflow-katib...

GO-2025-3540 vulnerabilities

Vulnerabilities for packages: falcosidekick, splunk-otel-collector, authservice, atlantis, fluent-bit-plugin-loki, gitea, kots, oauth2-proxy...

GO-2024-2962 vulnerabilities

Vulnerabilities for packages: newrelic-fluent-bit-output, argo-workflows, kubeflow-katib...

GO-2026-5264 vulnerabilities

Vulnerabilities for packages: trillian, mc, fluent-bit-plugin-loki, k8sgpt, minio-operator, karma, tempo, amazon-cloudwatch-agent-operator, istio, prometheus, prometheus-pushgateway, jaeger, loki, metrics-server, datadog-agent, grafana, keda, node-problem-detector, aws-otel-collector,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, hugo, flux, spire-server, goreleaser, tkn, velero, trino, fluent-bit-plugin-loki, k8sgpt, secrets-store-csi-driver-provider-azure, hugo-extended, kubescape, sqlpad, timestamp-authority, grafana-agent-operator, nuclei,...

CLEANSTART-2026-AA56293 Security fixes in fluent-bit-plugin-loki 3.6.5-r0

Package fluent-bit-plugin-loki version 3.6.5-r0 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-24051, CVE-2026-25679, CVE-2026-33186...

CVE-2025-63652 affecting package fluent-bit for versions less than 3.1.10-6

CVE-2025-63652 affecting package fluent-bit for versions less than 3.1.10-6. A patched version of the package is available...

CVE-2026-58055 affecting package fluent-bit for versions less than 3.1.10-6

CVE-2026-58055 affecting package fluent-bit for versions less than 3.1.10-6. A patched version of the package is available...

CVE-2025-63657 affecting package fluent-bit for versions less than 3.1.10-5

CVE-2025-63657 affecting package fluent-bit for versions less than 3.1.10-5. A patched version of the package is available...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: karpenter, kyverno, coredns, flux, spire-server, dask-gateway, kube-fluentd-operator, nerdctl, kubescape, k3s, gitlab-kas, falco-no-driver, external-secrets-operator, aws-flb-firehose, telegraf, aws-flb-cloudwatch, zot, kine, snyk-cli, aactl, istio, prometheus,...

CLEANSTART-2026-CG86499 Security fixes for CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186 applied in versions: 3.6.5-r0

Multiple security vulnerabilities affect the fluent-bit-plugin-loki package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42315

Multiple security vulnerabilities affect the newrelic-fluent-bit-output package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2021-27186

Fluent Bit 1.6.10 has a NULL pointer dereference when an flbmalloc return value is not validated by flbavro.c or httpserver/api/v1/metrics.c...

ROS-20260319-73-0010

A vulnerability in the inforward plug-in of the Fluent Bit logging tool is related to a lack of authentication for a critical function . Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and gain access to the system...

ROS-20260319-73-0008

A vulnerability in the indocker plugin of the extractname function of the Fluent Bit log collection and processing tool is related to a stacked buffer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

ROS-20260319-73-0009

A vulnerability in the outfile plugin of the Fluent Bit logging tool is related to an incorrect directory path name restriction. Exploitation of the vulnerability could allow an attacker acting remotely to write an arbitrary file outside the target directory...

ROS-20260319-73-0012

A vulnerability in the tagkey validation mechanism of the Fluent Bit log collection and processing tool is related to insufficient input data validation. Exploitation of the vulnerability could allow an attacker acting remotely to affect the integrity and availability of protected information...

ROS-20260319-73-0011

A vulnerability in the inhttp, insplunk and inelasticsearch plugins of the Fluent Bit log collection and processing tool is related to incorrect input data type validation when processing the tagkey parameter. Exploitation of the vulnerability could allow an attacker acting remotely to disclose a...