CVE-2026-78669 affecting package cert-manager for versions less than 1.12.15-15

CVE-2026-78669 affecting package cert-manager for versions less than 1.12.15-15. A patched version of the package is available...

CVE-2026-97032 affecting package cert-manager for versions less than 1.12.15-15

CVE-2026-97032 affecting package cert-manager for versions less than 1.12.15-15. A patched version of the package is available...

BASM (Broken Authentication & Session Management) org.apache.tomcat:tomcat-catalina Dependency in Confluence Data Center

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in versions 7.2.0, 7.3.1, 7.4.0, 7.5.0, 7.6.0, 7.7.2, 7.8.0, 7.9.0, 7.11.0, 7.12.0, 7.13.0, 7.14.0, 7.15.0, 7.16.0, 7.17.0, 7.18.0, 7.19.0, 7.20.0, 8.0.0, 8.1.0, 8.2.0, 8.3.0, 8.4.0, 8.5.0, 8.6.0, 8.7....

Astra Linux – Vulnerability in pam-pkcs11

PAM-PKCS11 is a Linux-PAM login module that enables user login using X.509 certificates. Prior to version 0.6.13, if certpolicy was set to none the default value, then pampkcs11 would only check whether the user was capable of logging into the token. An attacker could create a new token using the...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

cert-manager Operator for Red Hat OpenShift 1.17.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.18.2

cert-manager Operator for Red Hat OpenShift 1.18.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.1

cert-manager Operator for Red Hat OpenShift 1.17.1 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

cert-manager Operator for Red Hat OpenShift 1.17.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

Important: Red Hat Security Advisory: cert-manager Operator for Red Hat OpenShift 1.17.2

cert-manager Operator for Red Hat OpenShift 1.17.2 The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to...

PT-2026-113535

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description When operating in FIPS mode, the software fails to delete badly formed received certificates from the NSS cache after rejecting them. This occurs because the add decoded cert function lacks...

kaiju

CERT Kaiju Marco de Análisis Binario para GHIDRA CERT Kaiju es una colección de herramientas de análisis binario para Ghidra. Se trata de una implementación en Ghidra/Java de algunas características de CERT Pharos Binary Analysis Frameworkpharos, particularmente las herramientas de hashing de...

CVE-2026-56857 vulnerabilities

Vulnerabilities for packages: loki, nvidia-nsight-compute-13.4, zitadel, cert-manager, tempo-fips, nvidia-nsight-compute-13.0, commercial-spilo-fips, omnictl-multiarch-fips, nemo-gym, commercial-expanso-edge, frankenphp-8.4, nvidia-nsight-compute-13.2, falco-no-driver, kubernetes, consul-k8s-fips...

GO-2026-6613 vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...

GO-2026-6609 vulnerabilities

Vulnerabilities for packages: kube-arangodb, external-dns, rancher, spire-server, gitness, loki, headlamp, yunikorn-web, falco-no-driver, prometheus-adapter, step, grafana, hubble-ui, atlantis, continuity, filebrowser, ingress-nginx-controller, rclone, zarf, mesosphere-vsphere-csi, terragrunt,...

CVE-2026-97030 vulnerabilities

Vulnerabilities for packages: azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, loki, falco-no-driver, crossplane-provider-aws-elasticache, grafana, coredns, external-secrets-operator, rook,...

GHSA-C3Q7-M35P-9QQ7 vulnerabilities

Vulnerabilities for packages: flux, cert-manager, external-dns, kubernetes, spire-server, aactl, loki, ingress-nginx-controller, falco-no-driver, k8s-device-plugin...

CVE-2026-94439 vulnerabilities

Vulnerabilities for packages: delve, azuredisk-csi, volume-modifier-for-k8s, crossplane-provider-aws-cloudwatchlogs, grafana-rollout-operator, kube-arangodb, rancher, kube-state-metrics, nats, loki, whereabouts, postgres-operator, falco-no-driver, crossplane-provider-aws-elasticache, grafana,...