GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, rabbitmq-cluster-operator, local-path-provisioner, steampipe, wuzz, ingress-nginx-controller, sealed-secrets, docker, amazon-cloudwatch-agent-operator, wire-go, kube-vip-cloud-provider, pguser, step, nri-cassandra, k3d,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: dbmate, kapp-controller, vault-benchmark, rabbitmq-cluster-operator, local-path-provisioner, steampipe, wuzz, ingress-nginx-controller, sealed-secrets, docker, amazon-cloudwatch-agent-operator, wire-go, kube-vip-cloud-provider, pguser, step, nri-cassandra, k3d,...

CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: minio, podinfo, maru, dbmate, dockerize, kapp-controller, vault-benchmark, gke-gcloud-auth-plugin, kustomize, cortex, chisel, verticadb-operator, postgres-operator, kubernetes-csi-livenessprobe, fluxcd-kustomize-mutating-webhook, rabbitmq-cluster-operator, conjur-cli...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips, kapp-controlle...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips, kapp-controlle...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, xcaddy, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, xcaddy, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, xcaddy, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, mesosphere-vsphere-csi-fips, dex-fips, influxd, kyverno-policy-reporter-kyverno-plugin, flux-kustomize-controller, xcaddy, minio-fips, kube-arangodb-fips, aws-network-policy-agent-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler-fips, coredns-fips, prometheus-node-exporter-fips, kubebuilder, dex-fips, influxd, karma, gitaly, nri-kafka, newrelic-infrastructure-agent-fips, aws-network-policy-agent-fips, kapp-controller, local-path-provisioner-fips, gitlab-workhorse-ce,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: kubescape, kapp-controller, kubernetes-dashboard-auth, mockery, glow, rabbitmq-cluster-operator, rekor, steampipe, spicedb, neuvector-dbgen, ingress-nginx-controller, sealed-secrets, php-fpmexporter, helm-push, q, supercronic, ko, kube-vip-cloud-provider, pguser,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: git-lfs, prometheus-node-exporter-fips, vault-k8s, shfmt, node-problem-detector-fips, secrets-store-csi-driver-fips, octo-sts, eks-distro-fips, knative-eventing, local-path-provisioner, openbao-k8s-fips, cluster-api, karpenter-fips, confluent-common-docker,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubebuilder, dex-fips, influxd, flux-kustomize-controller, karma, minio-fips, nri-kafka, kapp-controller, local-path-provisioner-fips, cloud-sql-proxy, spark-operator-fips, prometheus-operator, cri-tools, kubo, podman, sftpgo-plugin-eventstore, kubevela,...

Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.4

Logging for Red Hat OpenShift - 6.2.4 Red Hat OpenShift Logging 6.2.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Logging operator 安全漏洞

Logging operator is a Kubernetes logging manager in the Kube Logging open source. A security vulnerability exists in Logging operator version 4.6.0 and earlier, which stems from an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate privileges by obtainin...

PT-2024-27062 · Unknown · Logging-Operator

Name of the Vulnerable Software and Affected Versions: logging-operator version 4.6.0 Description: The issue allows attackers to access sensitive data and escalate privileges by obtaining the service account's token due to insecure permissions. Recommendations: For logging-operator version 4.6.0,...