GHSA-6WX8-W4F5-WWCR vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails...

CVE-2026-54904 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails...

CVE-2026-54906 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, kube-logging-operator, ruby3.4-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby3.2-rails, ruby3.2-fluentd-kubernetes-daemonset, kube-fluentd-operator, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.3-faraday, logstash-fips, cinc-auditor, gitlab-cng, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: logstash, kube-logging-operator, ruby3.3-faraday, logstash-fips, cinc-auditor, gitlab-cng, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips...

CVE-2026-32282 vulnerabilities

Vulnerabilities for packages: chezmoi, falco-no-driver, gitlab-pages, cert-manager, cloud-provider-aws, keda, external-secrets-operator, newrelic-fluent-bit-output, gitaly, aws-flb-firehose, k8s-device-plugin, kots, k3s, kaf, cilium, karpenter, redka, kyverno, spire-server, aws-flb-kinesis,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: scorecard, modelmesh-runtime-adapter, falco-no-driver, k8sgpt-operator, rancher, kargo, secrets-store-csi-driver-provider-azure, cloud-provider-azure, flux-source-controller, falcoctl, step-issuer, gitaly, terraform-provider-time, cortex, flux-notification-controller...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: scorecard, percona-server-mongodb-operator, rancher, falcoctl, step-issuer, gitaly, cortex, nri-couchbase, cue, gatus, influx, neuvector-scanner, gostatsd, knative-eventing, prometheus, govulncheck, kyverno-policy-reporter-kyverno-plugin, pluto, aws-flb-cloudwatch,...

CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service

Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...

CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0

Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-2XGQ-Q749-89FQ vulnerabilities

Vulnerabilities for packages: logstash, ruby4.0-aws-sdk-s3, kube-fluentd-operator, ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3, ruby3.3-aws-sdk-s3...

CVE-2025-14762 vulnerabilities

Vulnerabilities for packages: logstash, ruby4.0-aws-sdk-s3, kube-fluentd-operator, ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3, ruby3.3-aws-sdk-s3...

CVE-2025-14762 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.4-aws-sdk-s3, ruby4.0-aws-sdk-s3, ruby3.3-aws-sdk-s3, kube-fluentd-operator, ruby3.2-aws-sdk-s3...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.2-rack, ruby3.3-rails, ruby3.3-rack, logstash, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.4-rails...

GHSA-6XW4-3V39-52MM vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.2-rack, ruby3.3-rails, ruby3.3-rack, logstash, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.4-rails...

CVE-2025-61780 vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.2-rack, ruby3.3-rails, ruby3.3-rack, logstash, kube-fluentd-operator, ruby3.2-rails, ruby4.0-rack, ruby3.4-rails...

CVE-2025-61919 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-rails, ruby3.4-rack, ruby3.2-rack, ruby3.4-rails, ruby3.2-rails, kube-fluentd-operator, ruby4.0-rack, gitlab-rails-ce, ruby3.3-rack...

GHSA-R657-RXJC-J557 vulnerabilities

Vulnerabilities for packages: logstash, ruby3.3-rails, ruby3.4-rack, ruby3.2-rack, ruby3.4-rails, ruby3.2-rails, kube-fluentd-operator, ruby4.0-rack, gitlab-rails-ce, ruby3.3-rack...