GHSA-XMRV-PMRH-HHX2 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, yace-fips, aws-nuke, bento, trufflehog-fips, crossplane-provider-aws-route53-fips, trivy-operator-fips, crossplane-provider-aws-cognitoidentity-fips, chainloop-artifact-cas-fips, opencost-fips, vitess, crossplane-provider-aws-s3,...

CVE-2026-27877 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-27880 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GHSA-4368-7MJC-5763 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-28375 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-736H-475M-XHJC vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GHSA-3Q27-7QJQ-P9C5 vulnerabilities

Vulnerabilities for packages: grafana-fips...

GHSA-JMFJ-8GXC-CG8C vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

GHSA-MP76-5XHH-VXVC vulnerabilities

Vulnerabilities for packages: grafana-fips...

CVE-2026-27876 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2026-27879 vulnerabilities

Vulnerabilities for packages: grafana-fips...

EUVD-2026-19958

Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service fo...

SUSE CVE-2026-28386

Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service fo...

AZL-82097 CVE-2026-28389 affecting package openssl-fips-provider 3.1.2-2

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of...

ALPINE-CVE-2026-28389

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyAgreeRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denial of...

CVE-2026-31790

Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious peer. Impact summary: The uninitialized buffer might contain sensitive data from the previous execution of the application process whi...

AZL-82106 CVE-2026-28390 affecting package openssl-fips-provider 3.1.2-2

Issue summary: During processing of a crafted CMS EnvelopedData message with KeyTransportRecipientInfo a NULL pointer dereference can happen. Impact summary: Applications that process attacker-controlled CMS data may crash before authentication or cryptographic operations occur resulting in Denia...

AZL-82103 CVE-2026-28387 affecting package openssl-fips-provider 3.1.2-2

Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may result in a use-after-free and/or double-free on the client side. Impact summary: A use after free can have a range of potential consequenc...

AZL-82100 CVE-2026-28388 affecting package openssl-fips-provider 3.1.2-2

Issue summary: When a delta CRL that contains a Delta CRL Indicator extension is processed a NULL pointer dereference might happen if the required CRL Number extension is missing. Impact summary: A NULL pointer dereference can trigger a crash which leads to a Denial of Service for an application...

DEBIAN-CVE-2026-28386

Issue summary: Applications using AES-CFB128 encryption or decryption on systems with AVX-512 and VAES support can trigger an out-of-bounds read of up to 15 bytes when processing partial cipher blocks. Impact summary: This out-of-bounds read may trigger a crash which leads to Denial of Service fo...