64 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: hello-world-golang, php-fpmexporter, sonobuoy, kubeflow, go-discover, neuvector-dbgen, terraform-provider-google, kpt, smokescreen, kube-fluentd-operator, gostatsd, src-fingerprint, aws-flb-firehose, aws-flb-cloudwatch, aws-flb-kinesis, docker-credential-gcr,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, tekton-chains, timoni, helm-operator, telegraf, nsc, prometheus-operator, loki, hubble, terraform-provider-azapi, rabbitmq-messaging-topology-operator, k3s, vexctl, cosign, infinispan-operator, external-dns, helm, sqlexporter, rancher...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: opentelemetry-collector-contrib, tekton-chains, timoni, helm-operator, telegraf, nsc, prometheus-operator, loki, hubble, terraform-provider-azapi, rabbitmq-messaging-topology-operator, k3s, vexctl, cosign, infinispan-operator, external-dns, helm, sqlexporter, rancher...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, terragrunt-fips, crossplane-function-environment-configs-fips, grafana-zipkin-datasource, crossplane-provider-aws-glacier-fips, grype, apache-beam-python-3.14-sdk, nsc, k3s, commercial-chainloop-cli, syft-fips, flux-kustomize-controller-fips,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: aws-ebs-csi-driver, terragrunt-fips, crossplane-function-environment-configs-fips, grafana-zipkin-datasource, crossplane-provider-aws-glacier-fips, grype, apache-beam-python-3.14-sdk, nsc, k3s, commercial-chainloop-cli, syft-fips, flux-kustomize-controller-fips,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash, kube-logging-operator, ruby3.2-rails, kube-fluentd-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips, ruby3.4-fluentd-kubernetes-daemonset,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash, kube-logging-operator, ruby3.2-rails, kube-fluentd-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips, ruby3.4-fluentd-kubernetes-daemonset,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash, kube-logging-operator, ruby3.2-rails, kube-fluentd-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips, ruby3.4-fluentd-kubernetes-daemonset,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, logstash, kube-logging-operator, ruby3.2-rails, kube-fluentd-operator, ruby3.3-fluentd-kubernetes-daemonset, ruby3.4-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips, ruby3.4-fluentd-kubernetes-daemonset,...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: logstash, gitlab-rails-ce, gitlab-cng, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.3-faraday, cinc-auditor, logstash-fips...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: logstash, gitlab-rails-ce, gitlab-cng, gitlab-rails-ce-fips, kube-logging-operator, kube-fluentd-operator, ruby3.3-faraday, cinc-auditor, logstash-fips...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: kots, prometheus, gitaly, flux, telegraf, mattermost, aws-flb-kinesis, kube-fluentd-operator, coredns, go, cert-manager, gitlab-kas, ingress-nginx-controller, gitlab-pages, kine, kubernetes-csi-node-driver-registrar, prometheus-operator, kubescape,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: incert, envoy-ratelimit, buf, timoni, local-path-provisioner, k3d, secrets-store-csi-driver, mailpit, chisel, temporal-ui-server, prometheus-operator, cluster-autoscaler, opentelemetry-operator, timescaledb-parallel-copy, kafka-proxy, nerdctl, bom,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: envoy-ratelimit, wave, buildah, timoni, dgraph, gitaly, crossplane-provider-azure-managedidentity, secrets-store-csi-driver, telegraf, mattermost, kubernetes-event-exporter, opentofu, ingress-nginx-controller, kserve-modelmesh-serving, rancher-machine,...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-2XGQ-Q749-89FQ vulnerabilities
Vulnerabilities for packages: ruby4.0-aws-sdk-s3, ruby3.4-aws-sdk-s3, ruby3.2-aws-sdk-s3, kube-fluentd-operator, ruby3.3-aws-sdk-s3...
CVE-2025-14762 vulnerabilities
Vulnerabilities for packages: ruby4.0-aws-sdk-s3, ruby3.4-aws-sdk-s3, ruby3.2-aws-sdk-s3, kube-fluentd-operator, ruby3.3-aws-sdk-s3...