69 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: kubeflow, neuvector-dbgen, terraform-provider-google, aws-flb-firehose, docker-credential-gcr, kube-fluentd-operator, aws-flb-kinesis, hello-world-golang, sonobuoy, aws-flb-cloudwatch, src-fingerprint, newrelic-nri-statsd, gostatsd, php-fpmexporter, go-discover,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: minio, nsc, amazon-cloudwatch-agent-operator, sqlexporter, istio, argo-cd, cloudnative-pg, pulumi-language-yaml, rancher, ctop, helm-operator, kube-rbac-proxy, pguser, trino, opentelemetry-collector-contrib, fuse-overlayfs-snapshotter, cert-manager, rancher-agent,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: minio, nsc, amazon-cloudwatch-agent-operator, sqlexporter, istio, argo-cd, cloudnative-pg, pulumi-language-yaml, rancher, ctop, helm-operator, kube-rbac-proxy, pguser, trino, opentelemetry-collector-contrib, fuse-overlayfs-snapshotter, cert-manager, rancher-agent,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: tigera-operator, jfrog-cli, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, apm-server-fips, tigera-operator-fips, commercial-spilo, cosign, helmfile, nsc-fips, melange, cloudnative-pg-fips, kube-router-fips, thanos-fips, virt-operator-fips,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: tigera-operator, jfrog-cli, cert-manager-google-cas-issuer-fips, aactl, knative-net-istio-fips, apm-server-fips, tigera-operator-fips, commercial-spilo, cosign, helmfile, nsc-fips, melange, cloudnative-pg-fips, kube-router-fips, thanos-fips, virt-operator-fips,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby4.0-rails, ruby3.3-rails, logstash-fips, ruby3.3-fluentd-kubernetes-daemonset,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby4.0-rails, ruby3.3-rails, logstash-fips, ruby3.3-fluentd-kubernetes-daemonset,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby4.0-rails, ruby3.3-rails, logstash-fips, ruby3.3-fluentd-kubernetes-daemonset,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby4.0-rails, ruby3.3-rails, logstash-fips, ruby3.3-fluentd-kubernetes-daemonset,...
CVE-2026-54905 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, ruby3.2-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, logstash, ruby4.0-rails, ruby3.3-rails, logstash-fips, ruby3.3-fluentd-kubernetes-daemonset,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, gitlab-rails-ce-fips, gitlab-cng, ruby3.3-faraday, logstash, gitlab-rails-ce, logstash-fips, cinc-auditor...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, kube-logging-operator, gitlab-rails-ce-fips, gitlab-cng, ruby3.3-faraday, logstash, gitlab-rails-ce, logstash-fips, cinc-auditor...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: nerdctl, cilium-cli, aws-flb-firehose, go, kube-fluentd-operator, aws-flb-kinesis, helm, aws-flb-cloudwatch, cert-manager, prometheus, prometheus-operator, aactl, kots, flux, istio, external-secrets-operator, argo-cd, kine, k8s-device-plugin, kyverno, gitlab-pages,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: opa-envoy, sbomqs, delve, portieris, terraform-provider-sendgrid, extism, k8ssandra-operator, clickhouse-operator, neuvector-dbgen, argo-rollouts, nri-haproxy, dex, cluster-proportional-autoscaler, sonobuoy, kpt, nri-mysql, cert-manager-csi-driver, juicefs-csi-driver...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: opa-envoy, db-operator, delve, argocd-image-updater, terraform-provider-tls, terraform-provider-sendgrid, k8sgpt-operator, k8ssandra-operator, aws-flb-cloudwatch, amazon-cloudwatch-agent-operator, net-kourier, argo-rollouts, kyverno-policy-reporter-kyverno-plugin,...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-2XGQ-Q749-89FQ vulnerabilities
Vulnerabilities for packages: ruby3.2-aws-sdk-s3, kube-fluentd-operator, ruby3.4-aws-sdk-s3, ruby3.3-aws-sdk-s3, ruby4.0-aws-sdk-s3...