GHSA-P98J-92PF-MC4P vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, librechat, gitlab-rails-ce, langfuse, langfuse-fips...

CVE-2026-101918 vulnerabilities

Vulnerabilities for packages: openstack-barbican-2026.1, openstack-manila-2025.2, tritonserver-backend-vllm-cuda-13.0, openstack-heat-2026.1, authentik-fips, openstack-neutron-2026.1, azureml-inference-server-http-fips, semgrep, ggshield, open-webui, openstack-designate-2026.1,...

GHSA-42VR-XJ54-VC7V vulnerabilities

Vulnerabilities for packages: openstack-barbican-2026.1, openstack-manila-2025.2, tritonserver-backend-vllm-cuda-13.0, openstack-heat-2026.1, authentik-fips, openstack-neutron-2026.1, azureml-inference-server-http-fips, semgrep, ggshield, open-webui, openstack-designate-2026.1,...

CVE-2026-103001 vulnerabilities

Vulnerabilities for packages: superset-fips, authentik-fips...

GHSA-JWRC-G2Q2-PQ5P vulnerabilities

Vulnerabilities for packages: superset-fips, authentik-fips...

CVE-2026-102270 vulnerabilities

Vulnerabilities for packages: superset-fips, authentik-fips...

GHSA-GVP8-978C-RX2Q vulnerabilities

Vulnerabilities for packages: superset-fips, authentik-fips...

Scalar-Venom-Attack

本稿では、現代の暗号鍵管理インフラストラクチャで発見された暗号上の脆弱性を分析し、特に楕円曲線秘密鍵を扱う際のハードウェアセキュリティモジュールHSMのアーキテクチャにおける重大な欠陥に焦点を当てます。この研究は、認定された暗号デバイスにおける不十分に隔離されたRAM管理を悪用する攻撃のクラスに注目しています。現代のビットコイン暗号エコシステムにおいて、秘密鍵のセキュリティは、世界中で数兆ドル相当のデジタル資産を保護するための基本的な要件です。FIPS...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, openstack-barbican-2026.1, openstack-glance-2025.1-fips, open-webui, openstack-designate-2026.1, openstack-placement-2025.1, openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-kolla-toolbox-2025.2-fips,...

deluded-openssl-3.2.0

Bienvenido al Proyecto OpenSSL !openssl logowww.openssl.org !github actions ci badgegithub actions ci !appveyor badgeappveyor jobs OpenSSL es un kit de herramientas Open Source robusto, de grado comercial y con todas las funciones para los protocolos TLS anteriormente SSL, DTLS y QUIC actualmente...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, openstack-barbican-2026.1, openstack-glance-2025.1-fips, open-webui, openstack-designate-2026.1, openstack-placement-2025.1, openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-kolla-toolbox-2025.2-fips,...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: openstack-kolla-toolbox-2025.2, openstack-barbican-2026.1, openstack-glance-2025.1-fips, open-webui, openstack-designate-2026.1, openstack-placement-2025.1, openstack-keystone-2025.2-fips, openstack-nova-2026.1, openstack-kolla-toolbox-2025.2-fips,...

GHSA-2GC4-CQFQ-P2GV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, redisinsight, gitlab-rails-ce...

CVE-2026-102599 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, redisinsight, gitlab-rails-ce...

GHSA-HJF4-FPHR-2H65 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, elastic-agent, grafana, grafana-fips...

CVE-2026-81872 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, elastic-agent, grafana, grafana-fips...

Security Bulletin: IBM webMethods Integration Sever is affected by multiple CVEs related to Bouncy Castle for Java FIPS jars

Summary IBM webMethods Integration Sever uses third party Bouncy Castle for Java FIPS jars that are affected by multiple CVEs. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X...

ejbca-pqc-lab

EJBCA Pure PQC Lab — ML-DSA-65 二層PKI階層 EJBCA Community Editionを使用した二層PKI階層におけるNIST FIPS 204 ML-DSAの実践的実装 📖 完全なウォークスルー: ポスト量子PKIの構築: EJBCA上でML-DSAを使用してルートCAとサブCAに署名した方法 このラボが構築するもの 2つの独立した仮想マシン上で動作する完全な純粋PQC PKI階層。各VMには独自のEJBCAコンテナがあります。 VM 1 — Root CA └─ ML-DSA-65 self-signed Root CA └─ CRL...

CVE-2026-101912 vulnerabilities

Vulnerabilities for packages: lerna, homepage, unleash, unleash-proxy, opensearch-dashboards, tileserver-gl-fips, sqlpad, librechat, kibana, opensearch-dashboards-fips, langfuse, code-server, npm, actions-runner, langfuse-fips...

CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, opentelemetry-auto-instrumentations-node, arangodb, lambda-nodejs, unleash, unleash-fips, sqlpad, ts-patch, authentik-fips, dotstatsuite-supercore, rancher-api-ui, authentik, gitlab-rails-ce-fips, opensearch-dashboards, tileserver-gl-fips,...