8304 matches found
CVE-2026-41603 vulnerabilities
Vulnerabilities for packages: automq, automq-fips...
GHSA-GF47-QGG5-9G9Q vulnerabilities
Vulnerabilities for packages: automq, automq-fips...
Scalar-Venom-Attack
This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...
CVE-2026-116585 vulnerabilities
Vulnerabilities for packages: crossplane, tekton-pipelines, grafana-fips, datadog-agent-fips, authentik-fips, kserve-localmodelnode-agent-fips, grafana, velero-fips, keda-fips, rancher, spicedb-operator-fips, vault-env, authentik, cert-manager-fips, vitess, external-secrets-operator,...
CVE-2026-116586 vulnerabilities
Vulnerabilities for packages: crossplane, tekton-pipelines, grafana-fips, datadog-agent-fips, authentik-fips, kserve-localmodelnode-agent-fips, grafana, velero-fips, keda-fips, rancher, spicedb-operator-fips, vault-env, authentik, cert-manager-fips, vitess, external-secrets-operator,...
CVE-2026-118264 vulnerabilities
Vulnerabilities for packages: falcosidekick-ui-fips, gotenberg, kube-metrics-adapter, temporal-ui-server-fips, perses-fips, perses, temporal, temporal-fips, falcosidekick-ui, listmonk, kube-metrics-adapter-fips, temporal-ui-server...
CVE-2026-63209 vulnerabilities
Vulnerabilities for packages: k3s, prometheus-mongodb-exporter, commercial-expanso-edge, commercial-kyverno, kots, zitadel, falco-no-driver, zot, backup-restore-operator, reports-server, helm, commercial-grafana, k3d, prometheus, terraform, spire-server, elastic-agent-fips, kyverno, upwind-agent,...
BIT-TOMCAT-2026-74048 Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up
Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...
golang-fips: Golang FIPS zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
deluded-openssl-3.2.0
Welcome to the OpenSSL Project !openssl logo !github actions ci badgegithub actions ci !appveyor badgeappveyor jobs OpenSSL is a robust, commercial-grade, full-featured Open Source Toolkit for the TLS formerly SSL, DTLS and QUIC currently client side only protocols. The protocol implementations a...
CVE-2026-116675 vulnerabilities
Vulnerabilities for packages: thingsboard-fips...
GHSA-MF2P-H6HF-FCWM vulnerabilities
Vulnerabilities for packages: thingsboard-fips...
CVE-2026-102554 vulnerabilities
Vulnerabilities for packages: traccar, apache-activemq-artemis-fips, management-api-for-apache-cassandra-5.0, aiven-kafka-connect-jdbc-fips, cruise-control-fips, nuxeo, flink-kubernetes-operator-fips, apache-hop, ontop-fips, copybara, apache-tika, aiven-kafka-connect-jdbc,...
GHSA-XXPH-C9WW-HJ94 vulnerabilities
Vulnerabilities for packages: traccar, apache-activemq-artemis-fips, management-api-for-apache-cassandra-5.0, aiven-kafka-connect-jdbc-fips, cruise-control-fips, nuxeo, flink-kubernetes-operator-fips, apache-hop, ontop-fips, copybara, apache-tika, aiven-kafka-connect-jdbc,...
GHSA-C8M5-C952-6CM4 vulnerabilities
Vulnerabilities for packages: lychee, qdrant, samply, efs-utils, komodo, ztunnel, symbolicator, cloud-hypervisor, wasmcloud, wadm, garage, zizmor, cargo-audit, sentry-relay-fips, kcl-lib, sentry-relay, ascan, symbolicator-fips, zellij, vector, buck2, kdash...
GHSA-H2V8-394M-P7VV vulnerabilities
Vulnerabilities for packages: lychee, qdrant, samply, efs-utils, komodo, ztunnel, symbolicator, cloud-hypervisor, wasmcloud, wadm, garage, zizmor, cargo-audit, sentry-relay-fips, kcl-lib, sentry-relay, ascan, symbolicator-fips, zellij, vector, buck2, kdash...
GHSA-VP88-798V-H67F vulnerabilities
Vulnerabilities for packages: wadm, zellij, zizmor, cargo-audit, samply, kcl-lib, sentry-relay-fips, sentry-relay, symbolicator, cloud-hypervisor, ascan, lychee, qdrant, symbolicator-fips, buck2, kdash, wasmcloud, efs-utils...
GHSA-W44R-93J7-QV28 vulnerabilities
Vulnerabilities for packages: lychee, qdrant, samply, efs-utils, komodo, ztunnel, symbolicator, cloud-hypervisor, wasmcloud, wadm, garage, zizmor, cargo-audit, sentry-relay-fips, kcl-lib, sentry-relay, ascan, symbolicator-fips, zellij, vector, buck2, kdash...