64 matches found
GO-2025-4188 vulnerabilities
Vulnerabilities for packages: aws-flb-cloudwatch, docker-credential-gcr, newrelic-nri-statsd, src-fingerprint, smokescreen, terraform-provider-google, kube-fluentd-operator, go-discover, aws-flb-kinesis, neuvector-dbgen, php-fpmexporter, kpt, kubeflow, hello-world-golang, gostatsd,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: envconsul, spire-server, fscrypt, minio, gitlab-kas, external-dns, pulumi-language-java, kube-rbac-proxy, crossplane-provider-keycloak, kaf, kustomize, nsc, pgtimetable, terraform-provider-azurerm, kine, melange, azurefile-csi, helm, rancher-fleet, zarf, vendir,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: envconsul, spire-server, fscrypt, minio, gitlab-kas, external-dns, pulumi-language-java, kube-rbac-proxy, crossplane-provider-keycloak, kaf, kustomize, nsc, pgtimetable, terraform-provider-azurerm, kine, melange, azurefile-csi, helm, rancher-fleet, zarf, vendir,...
GHSA-GG3M-VVP2-P2C5 vulnerabilities
Vulnerabilities for packages: peerdb-flow-fips, karpenter-fips, terragrunt, melange, nsc-fips, grype-fips, consul, longhorn-engine, cloud-provider-azure-fips, helm-operator-fips, gitlab-runner-fips, livekit-server-fips, spicedb-operator, flux-source-controller-fips, apm-server-fips, influxd-fips,...
CVE-2026-46600 vulnerabilities
Vulnerabilities for packages: peerdb-flow-fips, karpenter-fips, terragrunt, melange, nsc-fips, grype-fips, consul, longhorn-engine, cloud-provider-azure-fips, helm-operator-fips, gitlab-runner-fips, livekit-server-fips, spicedb-operator, flux-source-controller-fips, apm-server-fips, influxd-fips,...
CVE-2026-54906 vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.3-rails, commercial-gitlab-rails-ee-fips, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, logstash, ruby3.4-rails,...
GHSA-6WX8-W4F5-WWCR vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.3-rails, commercial-gitlab-rails-ee-fips, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, logstash, ruby3.4-rails,...
GHSA-H8W8-99G7-QMVJ vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.3-rails, commercial-gitlab-rails-ee-fips, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, logstash, ruby3.4-rails,...
GHSA-WV3X-4VXV-WHPP vulnerabilities
Vulnerabilities for packages: ruby3.2-rails, ruby3.4-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.3-rails, commercial-gitlab-rails-ee-fips, ruby4.0-rails, ruby4.0-fluentd-kubernetes-daemonset, ruby3.3-fluentd-kubernetes-daemonset, commercial-gitlab-rails-ee, logstash, ruby3.4-rails,...
GHSA-98M9-HRRM-R99R vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, cinc-auditor, gitlab-cng, ruby3.3-faraday, logstash, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, kube-logging-operator...
CVE-2026-54297 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, cinc-auditor, gitlab-cng, ruby3.3-faraday, logstash, kube-fluentd-operator, logstash-fips, gitlab-rails-ce-fips, kube-logging-operator...
CVE-2026-32282 vulnerabilities
Vulnerabilities for packages: nerdctl, kots, newrelic-fluent-bit-output, aws-flb-kinesis, gitlab-pages, spire-server, aactl, cilium-cli, dask-gateway, fscrypt, external-secrets-operator, chezmoi, aws-flb-cloudwatch, cert-manager, gitlab-kas, libnvidia-container, argo-cd, external-dns, go,...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: vault-secrets-webhook, buildah, docker-credential-acr-env, newrelic-fluent-bit-output, paranoia, aws-eks-pod-identity-agent, aws-flb-cloudwatch, vertical-pod-autoscaler, tetragon, polaris, cis-operator, nodetaint, nsc, opentelemetry-operator, kine, knative-eventing,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, vault-secrets-webhook, buildah, gitsign, newrelic-fluent-bit-output, trivy, envconsul, step-ca, gitlab-pages, chartmuseum, spire-server, dask-gateway, fscrypt, kpt, gatus, sftpgo-plugin-eventstore, argo-events,...
CLEANSTART-2026-HZ73294 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Multiple security vulnerabilities affect the kube-fluentd-operator package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. See references for individual...
CLEANSTART-2026-SQ68600 Security fixes for CVE-2023-45288, CVE-2024-24786, CVE-2024-45338, CVE-2025-22868, CVE-2025-22869, CVE-2025-22872, CVE-2025-47911, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58190, CVE-2025-65637, ghsa-4f99-4q7p-p3gh, ghsa-4v7x-pqxf-cx7m, ghsa-6v2p-p543-phr9, ghsa-8r3f-844c-mc37, ghsa-f6x5-jh6r-wrfv, ghsa-hcg3-q754-cr77, ghsa-j5w8-q4qc-rx2x, ghsa-qxp5-gwg8-xv66, ghsa-v778-237x-gjrc, ghsa-vvgc-356p-c3xw applied in versions: 1.18.2-r0
Multiple security vulnerabilities affect the kube-fluentd-operator package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2025-14762 vulnerabilities
Vulnerabilities for packages: ruby4.0-aws-sdk-s3, ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3, kube-fluentd-operator, ruby3.3-aws-sdk-s3...
GHSA-2XGQ-Q749-89FQ vulnerabilities
Vulnerabilities for packages: ruby4.0-aws-sdk-s3, ruby3.2-aws-sdk-s3, ruby3.4-aws-sdk-s3, kube-fluentd-operator, ruby3.3-aws-sdk-s3...