65 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: smokescreen, kube-fluentd-operator, go-discover, src-fingerprint, terraform-provider-google, kpt, kubeflow, php-fpmexporter, hello-world-golang, newrelic-nri-statsd, sonobuoy, aws-flb-cloudwatch, aws-flb-firehose, aws-flb-kinesis, gostatsd, neuvector-dbgen,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: zarf, fscrypt, rabbitmq-messaging-topology-operator, rancher-agent, containerd, falco-no-driver, infinispan-operator, kyverno, cert-manager, amazon-cloudwatch-agent-operator, pulumi-language-yaml, fuse-overlayfs-snapshotter, kitty, spire-server, kaf, vendir, flux, ko...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: zarf, fscrypt, rabbitmq-messaging-topology-operator, rancher-agent, containerd, falco-no-driver, infinispan-operator, kyverno, cert-manager, amazon-cloudwatch-agent-operator, pulumi-language-yaml, fuse-overlayfs-snapshotter, kitty, spire-server, kaf, vendir, flux, ko...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: tigera-operator, vexctl, grafana-rollout-operator, knative-eventing-fips, omnictl-multiarch-fips, cluster-api-azure-controller-fips, falco-no-driver, apko-fips, net-kourier, seaweedfs-operator, sftpgo-plugin-geoipfilter, kube-router-fips, flux-kustomize-controller,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: tigera-operator, vexctl, grafana-rollout-operator, knative-eventing-fips, omnictl-multiarch-fips, cluster-api-azure-controller-fips, falco-no-driver, apko-fips, net-kourier, seaweedfs-operator, sftpgo-plugin-geoipfilter, kube-router-fips, flux-kustomize-controller,...
CVE-2026-54904 vulnerabilities
Vulnerabilities for packages: logstash, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: logstash, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: logstash, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: logstash, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: logstash, ruby4.0-rails, ruby3.3-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby3.4-fluentd-kubernetes-daemonset, kube-logging-operator, logstash-fips, ruby4.0-fluentd-kubernetes-daemonset, ruby3.2-fluentd-kubernetes-daemonset, ruby3.2-rails, ruby3.4-rails,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: ruby3.3-faraday, logstash, gitlab-rails-ce-fips, gitlab-rails-ce, cinc-auditor, gitlab-cng, kube-fluentd-operator, kube-logging-operator, logstash-fips...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: ruby3.3-faraday, logstash, gitlab-rails-ce-fips, gitlab-rails-ce, cinc-auditor, gitlab-cng, kube-fluentd-operator, kube-logging-operator, logstash-fips...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: dask-gateway, gitaly, argo-cd, kubernetes-dashboard, cilium, redka, runc, aactl, newrelic-fluent-bit-output, aws-flb-kinesis, istio, zot, fscrypt, gitlab-pages, karpenter, libnvidia-container, falco-no-driver, mattermost, gitlab-kas, kyverno, cert-manager,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: k8sgpt-operator, fluxcd-kustomize-mutating-webhook, stern, kubernetes-csi-driver-nfs, podman, fscrypt, timescaledb-parallel-copy, libnvidia-container, kserve-modelmesh-serving, vault-secrets-webhook, gke-gcloud-auth-plugin, nri-consul, sriov-network-device-plugin,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, k8sgpt-operator, argocd-image-updater, grpcurl, cloud-sql-proxy, spire-controller-manager, argo-workflows, terraform-provider-tls, cluster-api-provider-vsphere, crossplane-provider-sql, kubernetes-csi-driver-nfs, fscrypt,...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-2XGQ-Q749-89FQ vulnerabilities
Vulnerabilities for packages: ruby4.0-aws-sdk-s3, ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3, ruby3.3-aws-sdk-s3, kube-fluentd-operator...