69 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: gostatsd, sonobuoy, aws-flb-firehose, kube-fluentd-operator, kpt, terraform-provider-google, newrelic-nri-statsd, kubeflow, smokescreen, src-fingerprint, neuvector-dbgen, php-fpmexporter, hello-world-golang, docker-credential-gcr, go-discover, aws-flb-cloudwatch,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: kubo, kube-fluentd-operator, istio, spicedb-operator, pulumi-language-yaml, grype, envconsul, sftpgo-plugin-auth, snyk-cli, kubernetes-dashboard, kaf, ctop, dataplaneapi, elvish, tekton-chains, sftpgo-plugin-geoipfilter, cerbos, pulumi-language-java,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: kubo, kube-fluentd-operator, istio, spicedb-operator, pulumi-language-yaml, grype, envconsul, sftpgo-plugin-auth, snyk-cli, kubernetes-dashboard, kaf, ctop, dataplaneapi, elvish, tekton-chains, sftpgo-plugin-geoipfilter, cerbos, pulumi-language-java,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, cloudnative-pg, livekit-server-fips, cosign, virt-operator-fips, knative-net-istio-fips, kueue-fips, pulumi-language-yaml, flux-notification-controller-fips, sqlexporter-fips, elastic-agent-fips, grafana-alloy-fips, deck,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: neuvector-scanner-fips, cloudnative-pg, livekit-server-fips, cosign, virt-operator-fips, knative-net-istio-fips, kueue-fips, pulumi-language-yaml, flux-notification-controller-fips, sqlexporter-fips, elastic-agent-fips, grafana-alloy-fips, deck,...
CVE-2026-54905 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee-fips, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, logstash, cinc-auditor, ruby4.0-rails, kube-fluentd-operator,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee-fips, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, logstash, cinc-auditor, ruby4.0-rails, kube-fluentd-operator,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee-fips, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, logstash, cinc-auditor, ruby4.0-rails, kube-fluentd-operator,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee-fips, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, logstash, cinc-auditor, ruby4.0-rails, kube-fluentd-operator,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: commercial-gitlab-rails-ee, kube-logging-operator, logstash-fips, ruby3.2-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee-fips, ruby3.4-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.3-rails, logstash, cinc-auditor, ruby4.0-rails, kube-fluentd-operator,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, logstash-fips, gitlab-rails-ce-fips, gitlab-cng, logstash, cinc-auditor, kube-fluentd-operator, ruby3.3-faraday, gitlab-rails-ce...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: kube-logging-operator, logstash-fips, gitlab-rails-ce-fips, gitlab-cng, logstash, cinc-auditor, kube-fluentd-operator, ruby3.3-faraday, gitlab-rails-ce...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: gitlab-kas, kube-fluentd-operator, telegraf, dask-gateway, mattermost, redka, cilium-cli, istio, nerdctl, kubernetes, falco-no-driver, libnvidia-container, aws-flb-cloudwatch, aws-flb-kinesis, fuse-overlayfs-snapshotter, aws-flb-firehose, snyk-cli, zot,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: falcoctl, dask-gateway, apko, grafana-mimir, filebrowser, kubernetes-dashboard-metrics-scraper, custom-pod-autoscaler, govulncheck, amass, gitaly, buildah, terraform-provider-aws, sftpgo-plugin-pubsub, terraform-mcp-server, yace, gitlab-pages, prometheus-operator,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: falcoctl, opentofu, kube-fluentd-operator, dask-gateway, cloud-sql-proxy, apko, etcd, redka, istio, osv-scanner, azure-service-operator, cue, grafana-mimir, libnvidia-container, spicedb-operator, chartmuseum, filebrowser, pulumi-language-yaml, authservice,...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-2XGQ-Q749-89FQ vulnerabilities
Vulnerabilities for packages: kube-fluentd-operator, ruby3.3-aws-sdk-s3, ruby4.0-aws-sdk-s3, ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3...