GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: kube-logging-operator, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset...

CVE-2026-54696 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, gitlab-rails-ce-fips, logstash, pghero, gitlab-rails-ce, cinc-auditor, pghero-fips, pact-broker-docker...

GHSA-48RX-C7PG-Q66R vulnerabilities

Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, kube-logging-operator, gitlab-rails-ce-fips...

CVE-2026-54171 vulnerabilities

Vulnerabilities for packages: cinc-auditor, gitlab-rails-ce, kube-logging-operator, gitlab-rails-ce-fips...

GHSA-X2F5-4PRF-W687 vulnerabilities

Vulnerabilities for packages: ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, gitlab-rails-ce-fips, logstash, pghero, gitlab-rails-ce, cinc-auditor, pghero-fips, pact-broker-docker...

Incorrect Calculation

Overview @aws-cdk/aws-codebuild is a The CDK Construct Library for AWS::CodeBuild Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An...

Incorrect Calculation

Overview Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting t...

Incorrect Calculation

Overview Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting t...

AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

Summary The AWS Cloud Development Kit AWS CDK is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS...

Incorrect Calculation

Overview aws-cdk-lib is a Version 2 of the AWS Cloud Development Kit library Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker c...

GHSA-464C-974J-9XM6 AWS CDK CodeBuild S3 Log Encryption Boolean Inversion

Summary The AWS Cloud Development Kit AWS CDK is an open-source software development framework for defining cloud infrastructure in code and provisioning it through AWS CloudFormation. We identified an issue in which explicitly setting encrypted: true on the S3LoggingOptions property of an AWS...

Incorrect Calculation

Overview Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting t...

Incorrect Calculation

Overview Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting t...

Incorrect Calculation

Overview Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting t...

Incorrect Calculation

Overview Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker can cause build logs to be stored unencrypted by explicitly setting t...

Incorrect Calculation

Overview aws-cdk.aws-codebuild is a The CDK Construct Library for AWS::CodeBuild Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attack...

Incorrect Calculation

Overview aws-cdk-lib is a Version 2 of the AWS Cloud Development Kit library Affected versions of this package are vulnerable to Incorrect Calculation due to the incorrect mapping of the S3LoggingOptions.encrypted property to the CloudFormation S3LogsConfig.EncryptionDisabled field. An attacker c...