65 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: neuvector-dbgen, src-fingerprint, php-fpmexporter, kubeflow, smokescreen, kpt, aws-flb-kinesis, aws-flb-firehose, aws-flb-cloudwatch, docker-credential-gcr, sonobuoy, gostatsd, hello-world-golang, go-discover, kube-fluentd-operator, terraform-provider-google,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: sftpgo, cloudnative-pg, grafana-alloy, k6, grype, kaf, cloud-provider-azure, minio, amazon-cloudwatch-agent-operator, external-dns, spire-server, fuse-overlayfs-snapshotter, kine, sqlexporter, argo-cd, gh, spicedb-operator, kubo, kube-fluentd-operator,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: sftpgo, cloudnative-pg, grafana-alloy, k6, grype, kaf, cloud-provider-azure, minio, amazon-cloudwatch-agent-operator, external-dns, spire-server, fuse-overlayfs-snapshotter, kine, sqlexporter, argo-cd, gh, spicedb-operator, kubo, kube-fluentd-operator,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, beats, terraform-provider-azurerm-fips, upwind-agent, seaweedfs-fips, sqlexporter, dcgm-exporter-fips, vault-secrets-operator-fips,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: flux-source-watcher, k8s-device-plugin, flux-source-controller, cert-manager-google-cas-issuer, seaweedfs-operator, jaeger-fips, beats, terraform-provider-azurerm-fips, upwind-agent, seaweedfs-fips, sqlexporter, dcgm-exporter-fips, vault-secrets-operator-fips,...
CVE-2026-54904 vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, cinc-auditor, logstash-fips, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator, logstash, ruby3.2-rails, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, cinc-auditor, logstash-fips, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator, logstash, ruby3.2-rails, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, cinc-auditor, logstash-fips, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator, logstash, ruby3.2-rails, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, cinc-auditor, logstash-fips, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator, logstash, ruby3.2-rails, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: ruby4.0-fluentd-kubernetes-daemonset, ruby3.4-rails, cinc-auditor, logstash-fips, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator, logstash, ruby3.2-rails, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-fluentd-kubernetes-daemonset,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce-fips, logstash-fips, kube-fluentd-operator, kube-logging-operator, gitlab-rails-ce, logstash, gitlab-cng, ruby3.3-faraday...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce-fips, logstash-fips, kube-fluentd-operator, kube-logging-operator, gitlab-rails-ce, logstash, gitlab-cng, ruby3.3-faraday...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: k3s, kyverno, ingress-nginx-controller, snyk-cli, aws-flb-firehose, aws-flb-cloudwatch, coredns, dask-gateway, kubescape, runc, chezmoi, cloud-provider-aws, fscrypt, kubernetes-dashboard, redka, external-secrets-operator, kaf, helm, external-dns, spire-server,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: tigera-operator, kubeflow-katib, weaviate, flux-helm-controller, kserve-modelmesh-serving, cloud-provider-azure, kine, rancher-loglevel, spicedb-operator, terraform-provider-sendgrid, yunikorn-k8shim, timescaledb-parallel-copy, aws-s3-controller, kuberlr,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: kubernetes-event-exporter, kubernetes-csi-driver-nfs, falcoctl, sftpgo, cloudnative-pg, kubeflow-katib, rancher-machine, opentelemetry-operator, weaviate, cloud-provider-aws, kube-arangodb, kubernetes-csi-livenessprobe, flux-helm-controller, terraform-provider-azurea...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-14762 vulnerabilities
Vulnerabilities for packages: ruby3.3-aws-sdk-s3, ruby4.0-aws-sdk-s3, ruby3.2-aws-sdk-s3, kube-fluentd-operator, ruby3.4-aws-sdk-s3...