MinIO Operator Console Authentication Bypass

MinIO Console is a graphical user interface for the for MinIO Operator. MinIO itself is a multi-cloud object storage project. Affected versions are subject to an authentication bypass issue in the Operator Console when an external IDP is enabled. id: CVE-2021-41266 info: name: MinIO Operator...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

CVE-2026-10609

The vulnerability CVE-2026-10609 affects the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, enabling a delegated editor to exfiltrate...

CVE-2026-10609

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...

GHSA-VJHF-6XFR-5P9G vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller-fips...

GHSA-4Q63-MR2M-57HF vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller-fips...

GHSA-25MH-HP8X-CGRV vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller-fips...

CVE-2025-14525 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller-fips...

CVE-2024-31420 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller-fips...

CVE-2024-33394 vulnerabilities

Vulnerabilities for packages: virt-operator-fips, virt-controller-fips...

GHSA-WJV4-X9W8-WM3H vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, ruby3.2-rails, kube-fluentd-operator, ruby3.4-rails...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby4.0-rails, ruby3.2-rails, kube-fluentd-operator, ruby3.4-rails...

GHSA-WFPW-MMFH-QQ69 vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: logstash-fips, pact-broker-docker, ruby3.3-rails, pact-broker-docker-fips, ruby4.0-rails, ruby3.2-rails, logstash, ruby3.4-rails, kube-logging-operator...