65 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: smokescreen, php-fpmexporter, src-fingerprint, gostatsd, kube-fluentd-operator, hello-world-golang, terraform-provider-google, kpt, aws-flb-cloudwatch, newrelic-nri-statsd, kubeflow, aws-flb-firehose, go-discover, neuvector-dbgen, docker-credential-gcr, sonobuoy,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: cosign, runc, kyverno, cluster-api-azure-controller, cadvisor, terraform-provider-google, rabbitmq-messaging-topology-operator, cilium, step-issuer, flux-notification-controller, rancher-fleet, kyverno-policy-reporter, flux-image-reflector-controller, spire-server,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: cosign, runc, kyverno, cluster-api-azure-controller, cadvisor, terraform-provider-google, rabbitmq-messaging-topology-operator, cilium, step-issuer, flux-notification-controller, rancher-fleet, kyverno-policy-reporter, flux-image-reflector-controller, spire-server,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: commercial-nginx-ingress, spicedb-operator, zitadel, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, prometheus-redis-exporter, omni-fips, gitlab-operator-fips, envconsul-fips, sftpgo-plugin-eventsearch, seaweedfs-operator...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: commercial-nginx-ingress, spicedb-operator, zitadel, flux-kustomize-controller, cloud-provider-azure-fips, cloud-provider-azure, gitlab-operator, prometheus-redis-exporter, omni-fips, gitlab-operator-fips, envconsul-fips, sftpgo-plugin-eventsearch, seaweedfs-operator...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby4.0-rails, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby4.0-rails, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby4.0-rails, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator,...
CVE-2026-54904 vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby4.0-rails, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: logstash-fips, ruby4.0-rails, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, ruby3.3-rails, kube-logging-operator, kube-fluentd-operator,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-cng, cinc-auditor, kube-logging-operator, gitlab-rails-ce-fips, logstash, ruby3.3-faraday...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, kube-fluentd-operator, logstash-fips, gitlab-cng, cinc-auditor, kube-logging-operator, gitlab-rails-ce-fips, logstash, ruby3.3-faraday...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: fscrypt, coredns, runc, kyverno, ingress-nginx-controller, chezmoi, dask-gateway, go, aws-flb-kinesis, telegraf, argo-cd, kubernetes, kots, gitaly, cloud-provider-aws, hubble, karpenter, istio, libnvidia-container, gitlab-pages, fuse-overlayfs-snapshotter, k3s,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: runc, spark-operator, kube-vip, kubeflow, apko, rabbitmq-messaging-topology-operator, gitlab-pages, pdfcpu, policy-controller, temporal-ui-server, kubescape-operator, terraform-provider-tls, controller-gen, kapp, rancher-fleet, malcontent,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: cosign, runc, memcached-exporter, kyverno, helm-mapkubeapis, cis-operator, dask-gateway, kubernetes-csi-driver-hostpath, kube-vip, goreleaser, gitaly, cadvisor, k8ssandra-client, vault-env, kyverno-notation-aws, smarter-device-manager, apko, kserve-modelmesh-serving,...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-14762 vulnerabilities
Vulnerabilities for packages: ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3, ruby4.0-aws-sdk-s3, ruby3.3-aws-sdk-s3, kube-fluentd-operator...