GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: thanos-operator, crossplane-provider-aws-sns, sealed-secrets, kustomize, amass, goreleaser, newrelic-nri-statsd, linkerd2-proxy-init, confluent-cp-docker-utils, dex, headlamp, percona-server-mongodb-operator, kubelet-csr-approver, hubble, aws-signer-notation-plugin,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: thanos-operator, crossplane-provider-aws-sns, sealed-secrets, kustomize, amass, goreleaser, newrelic-nri-statsd, linkerd2-proxy-init, confluent-cp-docker-utils, dex, headlamp, percona-server-mongodb-operator, kubelet-csr-approver, hubble, aws-signer-notation-plugin,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kapp-controller, azcopy, thanos-operator, crossplane-provider-aws-elasticache, paranoia, mods, kine, crossplane-provider-aws-sns, tofu-controller, sftpgo-plugin-pubsub, hubble-ui, sealed-secrets, kustomize, amass, gke-gcloud-auth-plugin, goreleaser,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc, temporal-ui-server-fips, ksops,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc, temporal-ui-server-fips, ksops,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, litestream, mc,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: policy-controller-fips, terraform-provider-time, rancher-security-scan-fips, kyverno-policy-reporter-ui-fips, grafana-rollout-operator, amazon-cloudwatch-agent-operator-fips, kapp-controller, spiffe-helper-fips, temporal-ui-server-fips, k8ssandra-client, ksops,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: terraform-provider-azurerm, thanos-operator, sealed-secrets, newrelic-nri-statsd, goreleaser, mockery, headlamp, percona-server-mongodb-operator, spicedb-operator, kubelet-csr-approver, hubble, ratify, ksops, mongodb-kubernetes-operator, spegel, hugo-extended,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: azuredisk-csi-fips, knative-serving, terraform-provider-time, memcached-exporter-fips, prometheus-process-exporter, addon-resizer, custom-pod-autoscaler-operator, mattmoor-chainit, azurefile-csi-fips, kube-vip-cloud-provider, kserve-rest-proxy,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubescape-operator-fips, rancher-security-scan-fips, grafana-rollout-operator, weaviate, kapp-controller, temporal-ui-server-fips, mc, k8ssandra-client, ksops, harbor-scanner-trivy-fips, falcosidekick, git-credential-oauth, rancher-loglevel, azurefile-csi-fips,...

Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.4

Logging for Red Hat OpenShift - 6.2.4 Red Hat OpenShift Logging 6.2.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Logging operator security vulnerability

Logging operator is a Kubernetes logging manager in the Kube Logging open source. A security vulnerability exists in Logging operator version 4.6.0 and earlier, which stems from an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate privileges by obtainin...