GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.2-rails, pact-broker-docker-fips, logstash, logstash-fips, ruby3.3-rails, ruby4.0-rails, gitlab-rails-ce, ruby3.4-rails, pact-broker-docker...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, logstash, cinc-auditor, logstash-fips, ruby3.3-faraday, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, logstash, cinc-auditor, logstash-fips, ruby3.3-faraday, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng...

CLEANSTART-2026-MR40751 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-68121, CVE-2026-32283, CVE-2026-39820, CVE-2026-39824, CVE-2026-39836, CVE-2026-42499 applied in versions: 1.9.1-r0, 1.9.1-r1, 1.9.1-r2

Multiple security vulnerabilities affect the logstash-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33637 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, logstash...

GHSA-5RV5-XJ5J-3484 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, kube-fluentd-operator, logstash...

CVE-2026-33637 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, logstash, cinc-auditor, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng...

GHSA-5RV5-XJ5J-3484 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, logstash, cinc-auditor, logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, gitlab-cng...

CLEANSTART-2026-DV49899 Security fixes for CVE-2024-45993, CVE-2025-31344, CVE-2025-48924, CVE-2026-26740, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33210, CVE-2026-33810, CVE-2026-33870, ghsa-33mh-2634-fwr2, ghsa-3m6g-2423-7cp3, ghsa-72hv-8253-57qq, ghsa-j288-q9x7-2f5v, ghsa-j4pr-3wm6-xx2r, ghsa-pwqr-wmgm-9rr8, ghsa-wx95-c6cv-8532 applied in versions: 9.3.0-r1, 9.3.0-r2, 9.3.1-r0, 9.3.2-r0

Multiple security vulnerabilities affect the logstash-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-445C-VH5M-36RJ vulnerabilities

Vulnerabilities for packages: celeborn, zipkin, spark, akhq, logstash, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, apache-pulsar, opensearch, flink, airflow, infinispan, kafka, solr, apache-activemq-artemis, sonarqube...

CVE-2026-34478 vulnerabilities

Vulnerabilities for packages: celeborn, zipkin, spark, akhq, logstash, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, apache-pulsar, opensearch, flink, airflow, infinispan, kafka, solr, apache-activemq-artemis, sonarqube...

CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: celeborn, zipkin, spark, akhq, logstash, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, apache-pulsar, opensearch, flink, airflow, infinispan, kafka, solr, apache-activemq-artemis, sonarqube...

GHSA-6HG6-V5C8-FPHQ vulnerabilities

Vulnerabilities for packages: celeborn, zipkin, spark, akhq, logstash, strimzi-kafka-operator, wavefront-proxy, kserve-modelmesh, neo4j, apache-pulsar, opensearch, flink, airflow, infinispan, kafka, solr, apache-activemq-artemis, sonarqube...

CVE-2026-34478 vulnerabilities

Vulnerabilities for packages: geoserver, sonarqube, logstash, camunda, tritonserver-backend-vllm-cuda-13.0, hadoop-fips, wavefront-proxy, solr, apache-pulsar, kafka-bridge, spark-fips, elasticsearch-fips, infinispan, flink, airflow, apache-activemq-fips, apache-activemq-artemis, nuxeo,...

GHSA-445C-VH5M-36RJ vulnerabilities

Vulnerabilities for packages: geoserver, sonarqube, logstash, camunda, tritonserver-backend-vllm-cuda-13.0, hadoop-fips, wavefront-proxy, solr, apache-pulsar, kafka-bridge, spark-fips, elasticsearch-fips, infinispan, flink, airflow, apache-activemq-fips, apache-activemq-artemis, nuxeo,...

GHSA-6HG6-V5C8-FPHQ vulnerabilities

Vulnerabilities for packages: geoserver, sonarqube, logstash, camunda, tritonserver-backend-vllm-cuda-13.0, hadoop-fips, wavefront-proxy, solr, apache-pulsar, kafka-bridge, spark-fips, elasticsearch-fips, infinispan, flink, airflow, apache-activemq-fips, apache-activemq-artemis, nuxeo,...

CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: geoserver, sonarqube, logstash, camunda, tritonserver-backend-vllm-cuda-13.0, hadoop-fips, wavefront-proxy, solr, apache-pulsar, kafka-bridge, spark-fips, elasticsearch-fips, infinispan, flink, airflow, apache-activemq-fips, apache-activemq-artemis, nuxeo,...

BIT-LOGSTASH-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

PT-2026-32434

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

CVE-2026-33466

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...