Homepage

Algorithmic Complexity Affecting kube-logging-operator package, versions <6.5.0-r2

Severity

 Recommended
low

Based on default assessment until relevant scores are available.

Threat Intelligence

EPSS
0.08% (24th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-WOLFILATEST-KUBELOGGINGOPERATOR-16620250
  • published10 May 2026
  • disclosed9 May 2026
Report a new vulnerability Found a mistake?

Introduced: 9 May 2026

NewCVE-2026-42245  (opens in a new tab)
CWE-407  (opens in a new tab)

How to fix?

Upgrade Wolfi kube-logging-operator to version 6.5.0-r2 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream kube-logging-operator package and not the kube-logging-operator package as distributed by Wolfi. See How to fix? for Wolfi relevant fixed versions and status.

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4, Net::IMAP::ResponseReader has quadratic time complexity when reading large responses containing many string literals. A hostile server can send responses which are crafted to exhaust the client's CPU for a denial of service attack. This issue has been patched in versions 0.4.24, 0.5.14, and 0.6.4.