112 matches found
CLEANSTART-2026-GI35870 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
Security vulnerability affects the kube-logging-operator package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently...
CLEANSTART-2026-EN61439 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
Security vulnerability affects the kube-logging-operator package. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffere...
CLEANSTART-2026-FI20100 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the kube-logging-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-IV56904 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing
Security vulnerability affects the kube-logging-operator package. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing...
CLEANSTART-2026-RX13164 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
Security vulnerability affects the kube-logging-operator package. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
PT-2026-120250
Security vulnerability affects the kube-logging-operator package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently...
PT-2026-120248
Security vulnerability affects the kube-logging-operator package. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffere...
PT-2026-120249
Security vulnerability affects the kube-logging-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
PT-2026-120252
Security vulnerability affects the kube-logging-operator package. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS INITIAL WINDOW SIZE values...
PT-2026-120251
Security vulnerability affects the kube-logging-operator package. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing...
GO-2026-6605 vulnerabilities
Vulnerabilities for packages: trivy-operator, nats, glow, cert-exporter, spire-controller-manager, sriov-network-device-plugin, vt-cli, pgtimetable, nats-server, tkn, spire-server, gcsfuse, grafana-mimir, malcontent, knative-operator, trufflehog, argo-cd, github-mcp-server, mockery,...
CLEANSTART-2026-QD34337 Security fix for GHSA-mxw3-3hh2-x2mh applied in: kube-logging-operator 6.2.2-r0, logstash-fips 9.2.6-r0
GHSA-mxw3-3hh2-x2mh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VV73117 Security fix for GHSA-g7gv-6qhm-4h2j applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-KN09353 Security fix for GHSA-xc9x-jj77-9p9j applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-DT55361 Security fix for GHSA-59gp-qqm7-cw4j applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-WC65057 Security fix for GHSA-v9wx-v5z4-wgfj applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-TY83067 Security fix for GHSA-jfh8-c2jp-hdph applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NY70538 Security fix for GHSA-72f5-rr8c-r6gr applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RT77723 Security fix for GHSA-pr7j-96cj-549h applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UM68205 Security fix for GHSA-j9cw-hwqf-85w7 applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...