CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails, pact-broker-docker-fips, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, gitlab-rails-ce-fips...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: pact-broker-docker, ruby3.2-rails, ruby3.4-rails, ruby3.3-rails, pact-broker-docker-fips, kube-logging-operator, gitlab-rails-ce, ruby4.0-rails, gitlab-rails-ce-fips...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-logging-operator...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-logging-operator...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby3.3-rails, ruby3.2-rails, ruby3.4-rails, ruby4.0-rails, kube-logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, kaniko, hubble, src-fingerprint, rancher-agent, bento, crossplane-provider-azure-authorization, sops, gke-gcloud-auth-plugin, spicedb-operator, temporal, newrelic-nri-kube-events, pinact, rancher-helm, vault-k8s, traefik,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: terraform-provider-pagerduty, hubble, scorecard, sops, bento, src-fingerprint, nerdctl, timescaledb-parallel-copy, gke-gcloud-auth-plugin, kustomize, vault-k8s, rancher-helm, whereabouts, kor, traefik, hydra, mongodb-kubernetes-operator, kubeflow, kubo, runc, src,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-driver-hostpath, hubble, kor, src, kapp-controller, cilium-cli, docker-credential-gcr, terraform-mcp-server, nodetaint, fulcio, cni-plugins, nova, migrate, docker-machine-driver-harvester, dgraph, portieris, kuberlr, nri-redis, clickhouse-operator,...

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...

CLEANSTART-2026-KD98941 Security fixes in kube-logging-operator 6.6.0-r1

Package kube-logging-operator version 6.6.0-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...

CLEANSTART-2026-TQ54429 Security fixes in kube-logging-operator 6.7.0-r2

Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...

CLEANSTART-2026-QW78358 Security fixes in kube-logging-operator 6.4.0-r1

Package kube-logging-operator version 6.4.0-r1 fixes 4 vulnerabilities: CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-hrxh-6v49-42gf, CVE-2026-33814...

CLEANSTART-2026-YA10976 Security fixes in kube-logging-operator 6.2.2-r0

Package kube-logging-operator version 6.2.2-r0 fixes 6 vulnerabilities: ghsa-mxw3-3hh2-x2mh, ghsa-jfh8-c2jp-hdph, ghsa-v9wx-v5z4-wgfj, ghsa-59gp-qqm7-cw4j, ghsa-g7gv-6qhm-4h2j...

CVE-2026-54680

Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...

Logging operator has Fluentd configuration injection that allows remote code execution

Summary The Fluentd configuration renderer in Logging operator writes strings from CRDs such as Flow directly into fluent.conf without escaping them. As a result, a user who can create Flow resources can inject Fluentd configuration by providing values that contain newlines. In the confirmed path...

CVE-2026-54680 Logging operator has Fluentd configuration injection that allows remote code execution

Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...