ruby3.2-kube-logging-operator-fluentd-outputs

2 results · Clear filters · Feed

• Critical 9.1
  CVE-2026-45363

  `jwt` (Ruby gem) - empty-key HMAC bypass

  ruby-jwt is a Ruby implementation of the RFC 7519 OAuth JSON Web Token standard. Prior to 2.10.3 and 3.2.0, JWT.decode(token, '', true, algorithm: 'HS256') accepts an attacker-forged token because OpenSSL::HMAC.digest('SHA256', '', payload) returns a valid di…

  jwt ruby-jwt kube-fluentd-operator ruby3.4-kube-logging-operator-fluentd-outputs Debian Ubuntu Wolfi RubyGems
  Jul 14, 2026
• Critical 9.8
  CVE-2026-44024 Public exploit

  Fluentd: Remote Code Execution (RCE) via Arbitrary File Write in `${tag}` Placeholder

  Fluentd collects events from various data sources and writes them to files, RDBMS, NoSQL, IaaS, SaaS, Hadoop and so on. Prior to 1.19.3, Fluentd allows dynamically constructing file paths using the ${tag} placeholder, and insufficient validation of ${tag} in …

  fluent fluentd kube-fluentd-operator ruby3.4-kube-logging-operator-fluentd-outputs Wolfi RubyGems
  Jul 8, 2026