GHSA-5V8H-3H3Q-446P vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, ruby4.0-rails, logstash-fips, kube-logging-operator, ruby3.3-rails, commercial-gitlab-rails-ee, ruby3.2-rails, pact-broker-docker...

GHSA-9CV2-CFXC-V4V2 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, ruby4.0-rails, logstash-fips, kube-logging-operator, ruby3.3-rails, commercial-gitlab-rails-ee, ruby3.2-rails, pact-broker-docker...

GHSA-6WX8-W4F5-WWCR vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips,...

GHSA-H8W8-99G7-QMVJ vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips,...

CVE-2026-54906 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips,...

GHSA-WV3X-4VXV-WHPP vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips,...

GHSA-8678-W3JW-XFC2 vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, ruby4.0-rails, logstash-fips, kube-logging-operator, ruby3.3-rails, commercial-gitlab-rails-ee, ruby3.2-rails, pact-broker-docker...

GHSA-PHWJ-RPRQ-35PP vulnerabilities

Vulnerabilities for packages: ruby3.4-rails, gitlab-rails-ce, pact-broker-docker-fips, logstash, ruby4.0-rails, logstash-fips, kube-logging-operator, ruby3.3-rails, commercial-gitlab-rails-ee, ruby3.2-rails, pact-broker-docker...

CVE-2026-54905 vulnerabilities

Vulnerabilities for packages: ruby3.3-fluentd-kubernetes-daemonset, cinc-auditor, ruby3.2-fluentd-kubernetes-daemonset, kube-logging-operator, kube-fluentd-operator, ruby3.4-rails, ruby3.4-fluentd-kubernetes-daemonset, logstash, ruby4.0-fluentd-kubernetes-daemonset, ruby4.0-rails, logstash-fips,...

CVE-2026-54297 vulnerabilities

Vulnerabilities for packages: cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-cng, gitlab-rails-ce-fips, logstash, ruby3.3-faraday, logstash-fips, kube-logging-operator...

GHSA-98M9-HRRM-R99R vulnerabilities

Vulnerabilities for packages: cinc-auditor, kube-fluentd-operator, gitlab-rails-ce, gitlab-cng, gitlab-rails-ce-fips, logstash, ruby3.3-faraday, logstash-fips, kube-logging-operator...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, upwind-agent, helm-mapkubeapis, helm-fips, xeol-fips, rancher, kubescape, xeol, helm-exporter-fips, kgateway-fips, syft, wolfictl, datadog-agent, grype-fips, redpanda-operator, teleport, docker-fips, chartmuseum-fips, ctop,...

GHSA-WJ3P-5H3X-C74Q vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

CVE-2025-62879 vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, upwind-agent, helm-mapkubeapis, helm-fips, xeol-fips, rancher, kubescape, xeol, helm-exporter-fips, kgateway-fips, syft, wolfictl, datadog-agent, grype-fips, redpanda-operator, teleport, docker-fips, chartmuseum-fips, ctop,...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: newrelic-infrastructure-agent, helm-mapkubeapis, helm-fips, xeol-fips, rancher, kubescape, xeol, helm-exporter-fips, kgateway-fips, syft, wolfictl, datadog-agent, grype-fips, redpanda-operator, teleport, docker-fips, chartmuseum-fips, ctop, crossplane-fips,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: flagger-fips, image-factory-fips, amazon-cloudwatch-agent, crossplane-provider-aws-cloudsearch, etcd, k6-operator, flux-kustomize-controller-fips, vault-env, blob-csi, grafana-mimir, trident-fips, kyverno-fips, rancher, kubernetes-csi-livenessprobe-fips,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: flagger-fips, image-factory-fips, amazon-cloudwatch-agent, crossplane-provider-aws-cloudsearch, etcd, k6-operator, flux-kustomize-controller-fips, vault-env, blob-csi, grafana-mimir, trident-fips, kyverno-fips, rancher, kubernetes-csi-livenessprobe-fips,...

Security Bulletin: Multiple Vulnerabilities in IBM Operator for PostgreSQL

Summary Multiple vulnerabilities were addressed in IBM Operator for PostgreSQL version v28.3.2. Vulnerability Details CVEID:CVE-2026-27145 DESCRIPTION:x509.Certificate.VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name SAN entries. This caused...

CVE-2026-10609: Missing Authorization

A missing authorization flaw was found in the OpenShift Cluster Logging Operator. The operator creates and forwards ServiceAccount tokens to output destinations without verifying that the ClusterLogForwarder creator has permission to use those credentials, allowing a delegated editor to exfiltrat...