CLEANSTART-2026-PM11258 Security fix for CVE-2026-44160 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RY78730 Security fix for CVE-2026-44161 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NY24300 Security fix for CVE-2026-44025 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EN06234 Security fix for CVE-2026-44024 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WT37658 Security fix for CVE-2026-47701 applied in: kube-logging-operator 6.5.2-r1, kube-logging-operator 6.6.0-r1

CVE-2026-47701 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: ruby3.3-mail, kube-logging-operator...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: ruby3.3-mail, kube-logging-operator...

SUSE CVE-2026-54680

Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, pact-broker-docker, pact-broker-docker-fips...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails, ruby3.2-rails, kube-logging-operator, pact-broker-docker, pact-broker-docker-fips...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-rails, ruby3.2-rails, ruby4.0-rails...

GO-2026-6142 Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator

Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, kube-logging-operator-fips...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: nri-couchbase, guac, neuvector-scanner, litefs, opentofu, crossplane-provider-aws-rds, azcopy, rancher-fleet, vault-benchmark, apisix-ingress-controller, nri-kubernetes, tekton-chains, act, cluster-autoscaler, docker-machine-driver-linode, step-issuer, db-operator,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: step-kms-plugin, nri-couchbase, guac, cert-manager-cmctl, cfssl, cloud-provider-vsphere, litefs, scorecard, opentofu, timescaledb-parallel-copy, crossplane-provider-aws-rds, azcopy, metacontroller, boring-registry, lazygit, vault-benchmark,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nuclei, step-kms-plugin, gcsfuse, guac, cloud-provider-vsphere, portieris, opentofu, kubernetes-csi-external-health-monitor, tekton-chains, rabbitmq-default-user-credential-updater, aws-eks-pod-identity-agent, lazydocker, ko, nri-nginx, witness, argo-events,...

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...