PT-2026-101375

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101627

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101805

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100445

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101597

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101853

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101249

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101985

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-100959

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

PT-2026-101959

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

EUVD-2026-81098

OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs...

CVE-2026-86049 Jupyter Server: 5xx request logging leaks token-bearing Referer header values

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

CVE-2026-86049

Jupyter Server (the backend for Jupyter web applications) prior to version 2.21.0 contains a token-leak flaw in the 5xx request logging path within jupyter_server/log.py. The Referer header is copied into a JSON header block without applying the same token scrubbing used for the request URI. When...

CVE-2026-92758

This MongoDB -related vulnerability occurs when the application logging mode is set to DEBUG or a malformed MongoDB connection string is used, causing application logs to capture sensitive information such as passwords and AWS secure access keys. The root cause is overly verbose or misconfigured ...

EUVD-2026-82380

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

BIT-MONGODB-2026-18702 Improper Authorization in MongoDB profile Command Allows Unauthorized Modification of Server-Wide Diagnostic Settings

An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database. This could allow suppression of diagnostic logging server-wide, potentially obscuring...

CVE-2026-92758: Insertion of Sensitive Information into Log File

If logging mode is set to DEBUG or a malformed MongoDB connection string is used, application logs may collect sensitive information if in use such as passwords and AWS secure access keys...

CVE-2026-86049: Insertion of Sensitive Information into Log File

Jupyter Server is the backend for Jupyter web applications. Prior to version 2.21.0, the 5xx request logging path in jupyterserver/log.py copies the Referer header into a JSON header block without applying the token scrubbing used for the request URI. A request that returns HTTP 500 while the...

Incorrect Authorization

Overview Affected versions of this package are vulnerable to Incorrect Authorization in the sdk/trace.NewTracerProvider. An attacker can obtain sensitive information by accessing info-level diagnostic logs that may include internal collector endpoints and credentials embedded in URLs. Note: This ...

CVE-2026-81870

OpenTelemetry-Go is the Go implementation of OpenTelemetry. From version 1.5.0 to 1.44.0, sdk/trace.NewTracerProvider emits a TracerProvider created internal Info-level diagnostic event whose MarshalLog implementations recursively include span processor, exporter, and client configuration...