GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: drone-fips, crossplane-provider-azure-storagecache, crossplane-provider-aws-codeartifact-fips, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ram, crossplane-provider-aws-elb, dex-fips, hclgrep-fips, hcl2json,...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-codeartifact-fips, crossplane-provider-aws-secretsmanager-fips, crossplane-provider-aws-ram, kuma, oauth2-proxy, grafana-mimir, headlamp, knative-operator-fips, sqlexporter, vault-secrets-operator, kiali-fips, eck-operator, plutono-fips,...

Oracle Linux 10 : golang (ELSA-2026-22120)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22120 advisory. 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1...

CVE-2026-59877 vulnerabilities

Vulnerabilities for packages: kibana, homepage, jitsucom-jitsu, pulumi, opentelemetry-auto-instrumentations-node, thingsboard-fips, nemo, langfuse-fips, kubeflow-centraldashboard, cadence-web, librechat, vitess...

GHSA-J3F2-48V5-CCWW vulnerabilities

Vulnerabilities for packages: kibana, homepage, jitsucom-jitsu, pulumi, opentelemetry-auto-instrumentations-node, thingsboard-fips, nemo, langfuse-fips, kubeflow-centraldashboard, cadence-web, librechat, vitess...

CVE-2026-12590 vulnerabilities

Vulnerabilities for packages: sqlpad, redisinsight, tileserver-gl-fips, argo-workflows, kubescape-grype-offline-db, azurite, opensearch-dashboards, thingsboard-fips, langfuse-fips, wazuh-dashboard, json-server, kubeflow-pipelines, unleash-fips, wazuh-dashboard-fips, tileserver-gl, unleash,...

CVE-2026-59869 vulnerabilities

Vulnerabilities for packages: foxx-cli, pulumi, sqlpad, redisinsight, lerna, prism, awx, percona-server-mongodb, vitess, opensearch-dashboards, langfuse-fips, gitlab-rails-ce, wazuh-dashboard, unleash-fips, wazuh-dashboard-fips, homepage, eslint, authentik-fips, unleash, kubeflow-centraldashboard...

GHSA-V422-HMWV-36X6 vulnerabilities

Vulnerabilities for packages: sqlpad, redisinsight, tileserver-gl-fips, argo-workflows, kubescape-grype-offline-db, azurite, opensearch-dashboards, thingsboard-fips, langfuse-fips, wazuh-dashboard, json-server, kubeflow-pipelines, unleash-fips, wazuh-dashboard-fips, tileserver-gl, unleash,...

GHSA-52CP-R559-CP3M vulnerabilities

Vulnerabilities for packages: foxx-cli, pulumi, sqlpad, redisinsight, lerna, prism, awx, percona-server-mongodb, vitess, opensearch-dashboards, langfuse-fips, gitlab-rails-ce, wazuh-dashboard, unleash-fips, wazuh-dashboard-fips, homepage, eslint, authentik-fips, unleash, kubeflow-centraldashboard...

GHSA-8X88-C5MF-7J5W vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, homepage, npm, pulumi, opensearch-dashboards-fips, sqlpad, lerna, prism, saf, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, graalvm, kubeflow-centraldashboard, wazuh-dashboard, actions-runner, opensearch-dashboards...

GHSA-GVWX-54WH-QM9J vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, kibana, pulumi, npm, opensearch-dashboards-fips, sqlpad, lerna, prism, saf, gitlab-rails-ce-fips, gitlab-rails-ce, code-server, graalvm, kubeflow-centraldashboard, wazuh-dashboard, actions-runner, opensearch-dashboards...

GHSA-MP7J-QC5W-4988 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

CVE-2026-54466 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

CVE-2026-54490 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

GHSA-XV26-6W52-CPH6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, arangodb...

GHSA-RJWR-M7QX-3FJR vulnerabilities

Vulnerabilities for packages: crossplane, crossplane-fips...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-pulsar, confluent-kafka, spark-kubernetes-operator-fips, hadoop-fips, kafka-fips, spark, confluent-kafka-jre-bcfips, hadoop-client-modules, apache-hop-fips, zookeeper-fips, spark-kubernetes-operator, druid, zookeeper, apache-nifi, pinot-fips, apache-hop, kafka...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-pulsar, confluent-kafka, spark-kubernetes-operator-fips, hadoop-fips, kafka-fips, spark, confluent-kafka-jre-bcfips, hadoop-client-modules, apache-hop-fips, zookeeper-fips, spark-kubernetes-operator, druid, zookeeper, apache-nifi, pinot-fips, apache-hop, kafka...

SUSE CVE-2026-44978

xrdp is an open source RDP server. Versions 0.10.6 and prior contain a heap out-of-bounds read vulnerability within the FIPS-specific receive paths. This vulnerability does not affect the default configuration of xrdp. The vulnerability is only exploitable when the security layer is set to...

CLEANSTART-2026-QS59444 Security fixes for CVE-2026-42504 applied in versions: 0.20.7-r3

Security vulnerability affects the ollama-fips package. This issue is resolved in later releases. See references for vulnerability details...