CVE-2026-28684 vulnerabilities

Vulnerabilities for packages: localstack, superset, authentik, kserve, ggshield, authentik-fips, keep, keep-fips, litellm...

CLEANSTART-2026-AL68245 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CVE-2026-5588

A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft CompositeVerifier implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially...

CVE-2026-6383 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-api, virt-launcher, virt-controller-fips, virt-handler-fips, virt-operator-fips, virt-handler, virt-operator, virt-controller...

GHSA-J6CV-3W8P-VRG8 vulnerabilities

Vulnerabilities for packages: virt-api-fips, virt-api, virt-launcher, virt-controller-fips, virt-handler-fips, virt-operator-fips, virt-handler, virt-operator, virt-controller...

GHSA-9VQ6-R4XH-VM55 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-33375 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-21724 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-7G92-G4VH-HP84 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-V92G-XGXW-VVMM vulnerabilities

Vulnerabilities for packages: airflow, superset, pgadmin4-fips, open-webui, airflow-core, jupyter-base-notebook, dagster-fips, mlflow, prefect-fips, dagster, nemo...

GHSA-497X-RRR9-68JP vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-alloy, grafana-alloy-fips, grafana-fips...

CVE-2026-21726 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-alloy, grafana-alloy-fips, grafana-fips...

Enclawed: A Configurable, Sector-Neutral Hardening Framework for Single-User AI Assistant Gateways

We present enclawed, a hard-fork hardening framework built on top of the OpenClaw single-user personal artificial intelligence AI assistant gateway. enclawed targets deployments that need attestable peer trust, deny-by-default external connectivity, signed-module loading, and a tamper-evident aud...

GHSA-WG6Q-6289-32HP vulnerabilities

Vulnerabilities for packages: guacamole-client, pinot-fips, logstash-fips, camunda, thingsboard, jenkins, pinot, keycloak, opensearch, wildfly, jruby, hadoop-fips, druid, nacos-docker, wso2is, kayenta-fips, commercial-elasticsearch, ghidra, apache-nifi-registry, apache-pulsar, kserve-modelmesh,...

CVE-2024-22262 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta...

GHSA-2WRP-6FG6-HMC5 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta...

CVE-2026-5588 vulnerabilities

Vulnerabilities for packages: guacamole-client, pinot-fips, logstash-fips, camunda, thingsboard, jenkins, pinot, keycloak, opensearch, wildfly, jruby, hadoop-fips, druid, nacos-docker, wso2is, kayenta-fips, commercial-elasticsearch, ghidra, apache-nifi-registry, apache-pulsar, kserve-modelmesh,...

GHSA-9JJ7-4M8R-RFCM vulnerabilities

Vulnerabilities for packages: kine, commercial-chainloop-backend, k3s, commercial-grafana, envoy-gateway-fips, spire-server, kots, commercial-expanso-edge, envoy-gateway...

CVE-2026-33816 vulnerabilities

Vulnerabilities for packages: kine, commercial-chainloop-backend, k3s, commercial-grafana, envoy-gateway-fips, spire-server, kots, commercial-expanso-edge, envoy-gateway...

GHSA-965H-392X-2MH5 vulnerabilities

Vulnerabilities for packages: fnm, pixi, tealdeer, cargo-audit, shadowsocks-rust, linkerd-extension-init, sdp-k8s-injector, wasm-pack, uv, zellij, lakekeeper, lychee, sqlx, py3-xet-core, deno, sentry-cli, sccache, berg, samply, rye, asciinema, linkerd2-proxy, qdrant, ztunnel-fips, zizmor,...