GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, kube-logging-operator, ruby4.0-rails, gitlab-rails-ce, pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, logstash-fips, ruby3.3-rails, logstash...

GHSA-P67V-3W7G-WJG7 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, kube-logging-operator, ruby4.0-rails, gitlab-rails-ce, pact-broker-docker-fips, ruby3.2-rails, pact-broker-docker, logstash-fips, ruby3.3-rails, logstash...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: ruby3.3-faraday, cinc-auditor, gitlab-cng, kube-logging-operator, gitlab-rails-ce-fips, logstash, logstash-fips, gitlab-rails-ce, kube-fluentd-operator...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: ruby3.3-faraday, cinc-auditor, gitlab-cng, kube-logging-operator, gitlab-rails-ce-fips, logstash, logstash-fips, gitlab-rails-ce, kube-fluentd-operator...

CLEANSTART-2026-MR40751 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-68121, CVE-2026-32283, CVE-2026-39820, CVE-2026-39824, CVE-2026-39836, CVE-2026-42499 applied in versions: 1.9.1-r0, 1.9.1-r1, 1.9.1-r2

Multiple security vulnerabilities affect the logstash-exporter package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-33637 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, logstash, kube-logging-operator, cinc-auditor...

GHSA-5RV5-XJ5J-3484 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, logstash, kube-logging-operator, cinc-auditor...

GHSA-5RV5-XJ5J-3484 vulnerabilities

Vulnerabilities for packages: cinc-auditor, gitlab-cng, kube-logging-operator, gitlab-rails-ce-fips, logstash, logstash-fips, gitlab-rails-ce, kube-fluentd-operator...

CVE-2026-33637 vulnerabilities

Vulnerabilities for packages: cinc-auditor, gitlab-cng, kube-logging-operator, gitlab-rails-ce-fips, logstash, logstash-fips, gitlab-rails-ce, kube-fluentd-operator...

CLEANSTART-2026-DV49899 Security fixes for CVE-2024-45993, CVE-2025-31344, CVE-2025-48924, CVE-2026-26740, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33210, CVE-2026-33810, CVE-2026-33870, ghsa-33mh-2634-fwr2, ghsa-3m6g-2423-7cp3, ghsa-72hv-8253-57qq, ghsa-j288-q9x7-2f5v, ghsa-j4pr-3wm6-xx2r, ghsa-pwqr-wmgm-9rr8, ghsa-wx95-c6cv-8532 applied in versions: 9.3.0-r1, 9.3.0-r2, 9.3.1-r0, 9.3.2-r0

Multiple security vulnerabilities affect the logstash-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-445C-VH5M-36RJ vulnerabilities

Vulnerabilities for packages: infinispan, wavefront-proxy, logstash, zipkin, sonarqube, apache-activemq-artemis, flink, strimzi-kafka-operator, kserve-modelmesh, apache-pulsar, celeborn, kafka, akhq, neo4j, solr, airflow, opensearch, spark...

CVE-2026-34478 vulnerabilities

Vulnerabilities for packages: infinispan, wavefront-proxy, logstash, zipkin, sonarqube, apache-activemq-artemis, flink, strimzi-kafka-operator, kserve-modelmesh, apache-pulsar, celeborn, kafka, akhq, neo4j, solr, airflow, opensearch, spark...

GHSA-6HG6-V5C8-FPHQ vulnerabilities

Vulnerabilities for packages: infinispan, wavefront-proxy, logstash, zipkin, sonarqube, apache-activemq-artemis, flink, strimzi-kafka-operator, kserve-modelmesh, apache-pulsar, celeborn, kafka, akhq, neo4j, solr, airflow, opensearch, spark...

CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: infinispan, wavefront-proxy, logstash, zipkin, sonarqube, apache-activemq-artemis, flink, strimzi-kafka-operator, kserve-modelmesh, apache-pulsar, celeborn, kafka, akhq, neo4j, solr, airflow, opensearch, spark...

GHSA-445C-VH5M-36RJ vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, geoserver, kafka-bridge, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, sonarqube, nuxeo, spark-kubernetes-operator, wavefront-proxy, pinot-fips, solr, strimzi-kafka-operator, apache-pulsar, ghidra, spark-fips, celeborn, neo4j,...

CVE-2026-34478 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, geoserver, kafka-bridge, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, sonarqube, nuxeo, spark-kubernetes-operator, wavefront-proxy, pinot-fips, solr, strimzi-kafka-operator, apache-pulsar, ghidra, spark-fips, celeborn, neo4j,...

GHSA-6HG6-V5C8-FPHQ vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, geoserver, kafka-bridge, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, sonarqube, nuxeo, spark-kubernetes-operator, wavefront-proxy, pinot-fips, solr, strimzi-kafka-operator, apache-pulsar, ghidra, spark-fips, celeborn, neo4j,...

CVE-2026-34477 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode, geoserver, kafka-bridge, lmcache-cuda-12.8, tritonserver-backend-vllm-cuda-13.0, sonarqube, nuxeo, spark-kubernetes-operator, wavefront-proxy, pinot-fips, solr, strimzi-kafka-operator, apache-pulsar, ghidra, spark-fips, celeborn, neo4j,...

BIT-LOGSTASH-2026-33466 Improper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File Write

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...

PT-2026-32434

Improper Limitation of a Pathname to a Restricted Directory CWE-22 in Logstash can lead to arbitrary file write and potentially remote code execution via Relative Path Traversal CAPEC-139. The archive extraction utilities used by Logstash do not properly validate file paths within compressed...