CLEANSTART-2026-PM11258 Security fix for CVE-2026-44160 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RY78730 Security fix for CVE-2026-44161 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NY24300 Security fix for CVE-2026-44025 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EN06234 Security fix for CVE-2026-44024 applied in: kube-logging-operator 6.7.0-r2

Security vulnerability affects the kube-logging-operator package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WT37658 Security fix for CVE-2026-47701 applied in: kube-logging-operator 6.5.2-r1, kube-logging-operator 6.6.0-r1

CVE-2026-47701 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-63435 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

GHSA-MVXR-6M87-MV2Q vulnerabilities

Vulnerabilities for packages: kube-logging-operator, ruby3.3-mail...

SUSE CVE-2026-54680

Logging operator automates the deployment and configuration of Kubernetes logging pipelines. Prior to 6.6.0, the Fluentd configuration renderer FluentRender in pkg/sdk/logging/model/render/fluent.go writes CRD strings such as Flow recordtransformer.records values directly into fluent.conf without...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, pact-broker-docker, gitlab-rails-ce-fips...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, gitlab-rails-ce, pact-broker-docker-fips, ruby3.4-rails, ruby3.3-rails, ruby4.0-rails, kube-logging-operator, pact-broker-docker, gitlab-rails-ce-fips...

CVE-2026-79771 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails...

CVE-2026-79770 vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails...

GHSA-5JHF-FPP7-V2PV vulnerabilities

Vulnerabilities for packages: ruby3.2-rails, kube-logging-operator, ruby3.3-rails, ruby3.4-rails, ruby4.0-rails...

GO-2026-6142 Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator

Logging operator has Fluentd configuration injection that allows remote code execution in github.com/kube-logging/logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GO-2026-5339 vulnerabilities

Vulnerabilities for packages: kube-logging-operator...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: kuma, stakater-reloader, delve, continuity, grafana-alloy, newrelic-nri-kube-events, nri-couchbase, argo-events, dapr, hcloud, pgpool2exporter, kube-vip, terraform-provider-acme, crossplane-provider-azure-managedidentity, cert-manager-webhook-pdns, helm,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: kuma, cloud-provider-vsphere, stakater-reloader, nri-couchbase, newrelic-nri-statsd, pgpool2exporter, helm, vault-secrets-webhook, terraform-provider-pagerduty, vault-benchmark, gatekeeper, swagger, aws-flb-cloudwatch, openbao-k8s, cilium-cli, git-lfs, grpcurl,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: cloud-provider-vsphere, delve, grafana-alloy, argo-events, timescaledb-tune, nodetaint, swagger, chartmuseum, prometheus-operator, cilium-cli, kyverno-notation-aws, harbor-cli, harbor-registry, nri-haproxy, wait-for-port, wire-go, fulcio, cluster-api-provider-vsphere...

CLEANSTART-2026-TD71000 Security fixes in kube-logging-operator 6.5.2-r1

Package kube-logging-operator version 6.5.2-r1 fixes 4 vulnerabilities: CVE-2026-47701, ghsa-cxh2-4639-vmc5, ghsa-hrxh-6v49-42gf, CVE-2026-46600...