GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, opensearch-dashboards-fips, librechat, wazuh-dashboard...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard...

CVE-2026-40293 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, openfga, openfga-fips, grafana-fips...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

CLEANSTART-2026-AN01004 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5588 PKIX draft CompositeVerifier accepts empty signature sequence as valid.

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix modules, Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All pkix modules, Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All pkix modules. This vulnerability...

CLEANSTART-2026-ZU09124 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the terragrunt-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-FB07695 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the velero-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual vulnerability...

CLEANSTART-2026-QO20135 When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint

Multiple security vulnerabilities affect the minio-operator-fips package. When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to wildcard DNS SANs which use a different case than the constraint. See references for individual...

CLEANSTART-2026-YG63570 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the minio-operator-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

GHSA-VFFH-X6R8-XX99 vulnerabilities

Vulnerabilities for packages: beats-fips, datadog-agent-fips, nrdot-collector, tempo, certificate-transparency, minio-object-browser-fips, splunk-otel-collector-fips, nrdot-collector-fips, certificate-transparency-fips, node-problem-detector, splunk-otel-collector, jaeger-fips, elastic-agent,...

CVE-2026-40179 vulnerabilities

Vulnerabilities for packages: beats-fips, datadog-agent-fips, nrdot-collector, tempo, certificate-transparency, minio-object-browser-fips, splunk-otel-collector-fips, nrdot-collector-fips, certificate-transparency-fips, node-problem-detector, splunk-otel-collector, jaeger-fips, elastic-agent,...

GHSA-QJ83-CQ47-W5F8 vulnerabilities

Vulnerabilities for packages: kibana, kubeflow-centraldashboard, langfuse, langfuse-fips...

CLEANSTART-2026-XO66325 Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

Multiple security vulnerabilities affect the gitea-fips package. Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic See references for individual vulnerability details...

Security Bulletin: Vulerability in IBM Spectrum Symphony with OpenSSL

Summary Vulerability in IBM Spectrum Symphony with OpenSSL Vulnerability Details CVEID:CVE-2024-13176 DESCRIPTION: Issue summary: A timing side-channel which could potentially allow recovering the private key exists in the ECDSA signature computation. Impact summary: A timing side-channel in ECDS...

CVE-2026-39429 vulnerabilities

Vulnerabilities for packages: kcp, kcp-fips...

GHSA-3J3Q-WP9X-585P vulnerabilities

Vulnerabilities for packages: kcp, kcp-fips...

Ubuntu 22.04 LTS : Linux kernel (Azure FIPS) vulnerabilities (USN-8163-1)

"The remote Ubuntu 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8163-1 advisory. Qualys discovered that several vulnerabilities existed in the AppArmor Linux kernel Security Module LSM. An unprivileged local attacker could use these...