CVE-2026-29642

A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...

CVE-2026-29648

In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg. As a result, less-privileged code may read or write these CSRs without the required exception, potentially bypassing intended state-enable based isolation control...

CVE-2026-29642

A local attacker who can execute privileged CSR operations or can induce firmware to do so performs carefully crafted reads/writes to menvcfg e.g., csrrs in M-mode. On affected XiangShan versions commit aecf601e803bfd2371667a3fb60bfcd83c333027, 2024-11-19, these menvcfg accesses can unexpectedly...

CVE-2026-29648

In OpenXiangShan NEMU, when Smstateen is enabled, clearing mstateen0.ENVCFG does not correctly restrict access to henvcfg and senvcfg. As a result, less-privileged code may read or write these CSRs without the required exception, potentially bypassing intended state-enable based isolation control...

CVE-2026-29643

XiangShan Open-source high-performance RISC-V processor commit edb1dfaf7d290ae99724594507dc46c2c2125384 2024-11-28 contains an improper exceptional-condition handling flaw in its CSR subsystem NewCSR. On affected versions, certain sequences of CSR operations targeting non-existent/custom CSR...

CVE-2026-29642

CVE-2026-29642 affects XiangShan (RISC-V) and is triggered by local access performing privileged CSR operations on menvcfg (e.g., csrrs in M-mode). Careful reads/writes can cause WPRI bits in the status view (xstatus) to be set to 1, despite WPRI being defined as values that should not be modifie...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr-fips, cert-manager-istio-csr...

GHSA-9GCG-W975-3RJH vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-39350 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: cadence-fips, nri-mysql-fips, rqlite-fips, terraform-provider-aws, kcp-fips, falco-no-driver, hugo, agentbeat-fips, kind, xeol, flux-image-reflector-controller, git-sync, vendir, knative-kafka-broker, minio-object-browser-fips, argo-events-fips, cloud-provider-aws,...

GHSA-JRG3-GFJW-HM96 vulnerabilities

Vulnerabilities for packages: cadence-fips, nri-mysql-fips, rqlite-fips, terraform-provider-aws, kcp-fips, falco-no-driver, hugo, agentbeat-fips, kind, xeol, flux-image-reflector-controller, git-sync, vendir, knative-kafka-broker, minio-object-browser-fips, argo-events-fips, cloud-provider-aws,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: go-bindata, terraform-provider-aws, argo-events-fips, mcp-grafana, trust-manager-fips, metrics-agent-fips, flannel, minio-operator-fips, knative-serving, nri-elasticsearch, sftpgo-plugin-auth, trust-manager, wait-for-port, crossplane-provider-aws-elasticache-fips,...

CVE-2026-34986 vulnerabilities

Vulnerabilities for packages: kubo, neuvector-sigstore-interface, falco-no-driver, skaffold-fips, agentbeat-fips, xeol, grype, knative-kafka-broker, packer-fips, spire-controller-manager, vault-csi-provider-fips, thanos-fips, tflint-fips, grafana-alloy-fips, cert-manager-fips,...

GHSA-78H2-9FRX-2JM8 vulnerabilities

Vulnerabilities for packages: kubo, neuvector-sigstore-interface, falco-no-driver, skaffold-fips, agentbeat-fips, xeol, grype, knative-kafka-broker, packer-fips, spire-controller-manager, vault-csi-provider-fips, thanos-fips, tflint-fips, grafana-alloy-fips, cert-manager-fips,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, opentelemetry-operator, step-issuer-fips, cert-manager-cmctl, cert-manager-cmctl-fips, opentelemetry-operator-fips, percona-server-mongodb-operator-fips, cert-manager-google-cas-issuer-fips, cert-manager-istio-csr, gitlab-operator-fips...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-exporter, cert-manager-cmctl, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-exporter, cert-manager-cmctl, aws-privateca-issuer, cert-manager-webhook-pdns, cert-manager-istio-csr, step-issuer...

CVE-2024-12401 vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, step-issuer-fips, step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer-fips, aws-privateca-issuer, cert-exporter, cert-manager-cmctl, cert-manager-cmctl-fips, cert-exporter-fips...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns-fips, step-issuer-fips, step-issuer, cert-manager-istio-csr, cert-manager-webhook-pdns, aws-privateca-issuer-fips, aws-privateca-issuer, cert-exporter, cert-manager-cmctl, cert-manager-cmctl-fips, cert-exporter-fips...