CVE-2025-61726 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, ferretdb, hey, mesosphere-vsphere-csi, restic, kubernetes-csi-external-provisioner, gptscript, rancher-loglevel, opencost, cert-manager-istio-csr, goreleaser, cluster-api-ipam-provider-in-cluster, pgtimetable, wgcf, xeol,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-firehose, ferretdb, hey, mesosphere-vsphere-csi, restic, kubernetes-csi-external-provisioner, gptscript, http-echo, rancher-loglevel, opencost, cert-manager-istio-csr, nri-nginx, goreleaser, cluster-api-ipam-provider-in-cluster, pgtimetable,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: hey, ferretdb, mesosphere-vsphere-csi, jaeger, kubernetes-csi-external-provisioner, http-echo, opencost, nri-nginx, goreleaser, pgtimetable, nri-jmx, nri-mongodb, rancher-telemetry, sops, kubernetes-csi-driver-nfs, kustomize, crossplane-provider-aws-rds,...

CVE-2025-61730 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, cass-operator-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kyverno-policy-reporter-ui, kube-state-metrics, gpu-operator-fips, mongodb-kubernetes-operator, crossplane-provider-aws-rds-fips,...

GHSA-GR56-3GP6-6GMJ vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, cass-operator-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kyverno-policy-reporter-ui, kube-state-metrics, gpu-operator-fips, mongodb-kubernetes-operator, crossplane-provider-aws-rds-fips,...

CVE-2025-61731 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, cass-operator-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kyverno-policy-reporter-ui, kube-state-metrics, gpu-operator-fips, mongodb-kubernetes-operator, crossplane-provider-aws-rds-fips,...

GHSA-CM6P-QC7V-M3JW vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, cass-operator-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kyverno-policy-reporter-ui, kube-state-metrics, gpu-operator-fips, mongodb-kubernetes-operator, crossplane-provider-aws-rds-fips,...

GHSA-XVQR-69V8-F3GV vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, cass-operator-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kyverno-policy-reporter-ui, kube-state-metrics, gpu-operator-fips, mongodb-kubernetes-operator, crossplane-provider-aws-rds-fips,...

CVE-2025-68119 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, s5cmd-fips, cass-operator-fips, crossplane-provider-aws-kinesis-fips, datadog-operator-fips, kyverno-policy-reporter-ui, kube-state-metrics, gpu-operator-fips, mongodb-kubernetes-operator, crossplane-provider-aws-rds-fips,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: cass-operator-fips, datadog-operator-fips, kargo, ko-fips, kube-state-metrics, gpu-operator-fips, jitsucom-bulker, mongodb-kubernetes-operator, traefik-fips, mariadb-operator-fips, pluto, trivy-operator-fips, kyverno-notation-aws-fips, nvidia-nsight-compute-12.9,...

CVE-2025-61729 vulnerabilities

Vulnerabilities for packages: hey, k6, mesosphere-vsphere-csi, kubernetes-csi-external-provisioner, http-echo, opencost, nri-nginx, goreleaser, temporal, pgtimetable, gitsign, migrate, nri-jmx, helm-push, nri-mongodb, rancher-telemetry, newrelic-infrastructure-agent, kubernetes-csi-driver-nfs,...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: mongodb-kubernetes-operator, nvidia-nsight-compute-13.1, kubeflow-katib, terraform-provider-sendgrid-fips, eks-distro-fips, nvidia-nsight-compute-12.9, php-fpmexporter, secrets-store-csi-driver-provider-aws, karpenter, gcp-compute-persistent-disk-csi-driver-fips,...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: azure-workload-identity-webhook, amazon-cloudwatch-agent, kube-state-metrics, jitsucom-bulker, trivy-operator-fips, zot, nvidia-nsight-compute-12.9, cluster-api-ipam-provider-in-cluster, gh, kubernetes-dashboard-web, newrelic-k8s-metadata-injection-fips,...

Moderate: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.2.4

Logging for Red Hat OpenShift - 6.2.4 Red Hat OpenShift Logging 6.2.4 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

CVE-2024-36541

Insecure permissions in logging-operator v4.6.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token...

Logging operator security vulnerability

Logging operator is a Kubernetes logging manager in the Kube Logging open source. A security vulnerability exists in Logging operator version 4.6.0 and earlier, which stems from an insecure privilege vulnerability that allows an attacker to access sensitive data and elevate privileges by obtainin...