85 matches found
GO-2026-5339 vulnerabilities
Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...
GO-2026-5339 vulnerabilities
Vulnerabilities for packages: kube-logging-operator...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: kubernetes, crossplane-provider-aws-firehose, crossplane-provider-aws-s3, nri-couchbase, helm, pgpool2exporter, timoni, crossplane-provider-aws-cloudwatchlogs, harbor-scanner-trivy, harbor, litestream, glab, metrics-server, octo-sts, src, runc, croc, manifest-tool,...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: timoni, crossplane-provider-aws-firehose, crossplane-provider-aws-s3, nri-couchbase, lazygit, pgpool2exporter, scorecard, crossplane-provider-aws-cloudwatchlogs, http-echo, litestream, octo-sts, src, custom-pod-autoscaler, croc, manifest-tool, opentofu, runc,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: ini-file, wire-go, src, ko, headlamp, caddy, kubernetes-csi-external-health-monitor, envconsul, ip-masq-agent, rabbitmq-default-user-credential-updater, terraform-mcp-server, kubernetes-dashboard-web, docker-cli, helm-operator, nova, aws-otel-collector, gobuster,...
CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1
Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...
CLEANSTART-2026-KD98941 Security fixes in kube-logging-operator 6.6.0-r1
Package kube-logging-operator version 6.6.0-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...
CLEANSTART-2026-TQ54429 Security fixes in kube-logging-operator 6.7.0-r2
Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...
CLEANSTART-2026-QW78358 Security fixes in kube-logging-operator 6.4.0-r1
Package kube-logging-operator version 6.4.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33814...
CVE-2026-54680
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...
Logging operator has Fluentd configuration injection that allows remote code execution
Summary The Fluentd configuration renderer in Logging operator writes strings from CRDs such as Flow directly into fluent.conf without escaping them. As a result, a user who can create Flow resources can inject Fluentd configuration by providing values that contain newlines. In the confirmed path...
CVE-2026-54680 Logging operator has Fluentd configuration injection that allows remote code execution
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...
CVE-2026-54680 Logging operator has Fluentd configuration injection that allows remote code execution
Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...
CVE-2026-54680
The CVE concerns the Kubernetes Logging Operator (Logging operator) where FluentRender (FluentRender) in Fluentd config rendering writes CRD values (e.g., Flow record_transformer.records) directly into fluent.conf without escaping. This allows a user who can create Flow resources to inject a blo...
CVE-2026-54171 vulnerabilities
Vulnerabilities for packages: cinc-auditor, kube-logging-operator...
CVE-2026-54696 vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...
GHSA-48RX-C7PG-Q66R vulnerabilities
Vulnerabilities for packages: cinc-auditor, kube-logging-operator...
GHSA-X2F5-4PRF-W687 vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator...