107 matches found
CLEANSTART-2026-FI20100 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the kube-logging-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-GI35870 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
Security vulnerability affects the kube-logging-operator package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently...
CLEANSTART-2026-EN61439 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
Security vulnerability affects the kube-logging-operator package. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffere...
CLEANSTART-2026-IV56904 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing
Security vulnerability affects the kube-logging-operator package. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing...
CLEANSTART-2026-RX13164 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
Security vulnerability affects the kube-logging-operator package. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
GO-2026-6605 vulnerabilities
Vulnerabilities for packages: argo-cd, trufflehog, vcluster, fluent-bit-plugin-loki, postgres-operator, vt-cli, melange, delve, flux-source-controller, pinact, rclone, sriov-network-device-plugin, spark-operator, step-issuer, kyverno-notation-aws, mountpoint-s3-csi-driver, gostatsd, steampipe,...
CLEANSTART-2026-QD34337 Security fix for ghsa-mxw3-3hh2-x2mh applied in: kube-logging-operator 6.2.2-r0, logstash-fips 9.2.6-r0
ghsa-mxw3-3hh2-x2mh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VV73117 Security fix for ghsa-g7gv-6qhm-4h2j applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-KN09353 Security fix for ghsa-xc9x-jj77-9p9j applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-WC65057 Security fix for ghsa-v9wx-v5z4-wgfj applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-DT55361 Security fix for ghsa-59gp-qqm7-cw4j applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-TY83067 Security fix for ghsa-jfh8-c2jp-hdph applied in: kube-logging-operator 6.2.2-r0
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NY70538 Security fix for ghsa-72f5-rr8c-r6gr applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RT77723 Security fix for ghsa-pr7j-96cj-549h applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UM68205 Security fix for ghsa-j9cw-hwqf-85w7 applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RY78730 Security fix for CVE-2026-44161 applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PM11258 Security fix for CVE-2026-44160 applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NY24300 Security fix for CVE-2026-44025 applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EN06234 Security fix for CVE-2026-44024 applied in: kube-logging-operator 6.7.0-r2
Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-LP17262 Security fix for ghsa-cxh2-4639-vmc5 applied in: kube-logging-operator 6.5.2-r1, kube-logging-operator 6.6.0-r1
ghsa-cxh2-4639-vmc5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...