CLEANSTART-2026-PM11258 Security fix for CVE-2026-44160 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RY78730 Security fix for CVE-2026-44161 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NY24300 Security fix for CVE-2026-44025 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EN06234 Security fix for CVE-2026-44024 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WT37658 Security fix for CVE-2026-47701 applied in: kube-logging-operator 6.5.2-r1, kube-logging-operator 6.6.0-r1

CVE-2026-47701 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

SUSE CVE-2026-54680

Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.2-rails, ruby3.3-rails, gitlab-rails-ce-fips, kube-logging-operator...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: pact-broker-docker, gitlab-rails-ce, ruby3.4-rails, ruby4.0-rails, pact-broker-docker-fips, ruby3.2-rails, ruby3.3-rails, gitlab-rails-ce-fips, kube-logging-operator...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, ruby3.3-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, ruby3.3-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, ruby4.0-rails, ruby3.4-rails, ruby3.3-rails...

GO-2026-6142 Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator

Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: cluster-autoscaler, haproxy-ingress, tekton-chains, grafana-alloy, percona-server-mongodb-operator, terragrunt, crossplane-provider-aws-route53, cert-manager-webhook-pdns, nri-couchbase, crossplane-provider-aws-firehose, terraform-provider-azurerm, cert-exporter,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: aws-eks-pod-identity-agent, boring-registry, percona-server-mongodb-operator, chart-testing, openbao-k8s, nri-couchbase, crossplane-provider-aws-firehose, ghaudit, tetragon, x509-certificate-exporter, k3d, src-fingerprint, aactl, kyverno-policy-reporter-ui, croc,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: render-template, aws-eks-pod-identity-agent, tekton-chains, nri-memcached, caddy, cni-plugins, chart-testing, grafana-alloy, docker-cli-buildx, k3d, aactl, tkn, helm-push, aws-application-networking-k8s, ip-masq-agent, chartmuseum, rabbitmq-messaging-topology-operato...

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...