https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-15T20:50:17.205526+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-tq54429 Withdrawn: CLEANSTART-2026-TQ54429 — Security fixes in kube-logging-operator 6.7.0-r2 2026-10-15T20:50:17.207248+00:00

Withdrawn by the publisher.

Affected: CleanStart: kube-logging-operator

Package kube-logging-operator version 6.7.0-r2 fixes 9 vulnerabilities: CVE-2026-56852, CVE-2026-46600, CVE-2026-44024, CVE-2026-44025, CVE-2026-44160...

 https://db.gcve.eu/vuln/cve-2026-44160 CVE-2026-44160 — Fluentd: Denial of Service (DoS) via Gzip Decompression Bomb in `in_http` and `in_forward` 2026-10-15T20:50:17.207302+00:00

Affected: fluentd

Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd's in_http and in_forward plugins support gzip-compressed data but enforce limits only on compressed payloads through settings such as body_size_limit and chunk_size_limit, allowing crafted compressed payloads to decompress in memory to an excessive size and cause denial of service through memory exhaustion. This issue is fixed in version 1.19.3.