GHSA-XH8F-G2QW-GCM7 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

CVE-2026-42600 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

GO-2026-5018 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-33637 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-cng, kube-logging-operator, cinc-auditor, gitlab-rails-ce, logstash, logstash-fips...

GHSA-5RV5-XJ5J-3484 vulnerabilities

Vulnerabilities for packages: kube-fluentd-operator, gitlab-rails-ce-fips, gitlab-cng, kube-logging-operator, cinc-auditor, gitlab-rails-ce, logstash, logstash-fips...

CLEANSTART-2026-MJ26242 Security fixes for CVE-2026-41602, ghsa-wf45-q9ch-q8gh applied in versions: 1.300066.1-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0

Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3

Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-42708

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description RSA and DSA public key parsers fail to enforce size limits on key parameters. An unauthenticated client can trigger excessive CPU consumption during signature...

CVE-2026-45740 vulnerabilities

Vulnerabilities for packages: renovate, langfuse-fips, jitsucom-jitsu, librechat, vitess, pulumi, langfuse, gemini-cli, cadence-web, kibana...

GHSA-JGGG-4JG4-V7C6 vulnerabilities

Vulnerabilities for packages: renovate, langfuse-fips, jitsucom-jitsu, librechat, vitess, pulumi, langfuse, gemini-cli, cadence-web, kibana...

GHSA-JXXR-4GWJ-5JF2 vulnerabilities

Vulnerabilities for packages: prism, renovate, actions-runner, langfuse-fips, vitess, opensearch-dashboards, opensearch-dashboards-fips, airflow, tileserver-gl-fips, npm, ts-patch, emscripten, pulumi, langfuse, tileserver-gl, lerna, kibana...

GHSA-58QX-3VCG-4XPX vulnerabilities

Vulnerabilities for packages: redisinsight, gitlab-rails-ce-fips, wazuh-dashboard-fips, homepage, langfuse-fips, kubeflow-pipelines, vitess, opensearch-dashboards, opensearch-dashboards-fips, gitlab-rails-ce, argo-workflows, langfuse, code-server, kibana...

CVE-2026-45736 vulnerabilities

Vulnerabilities for packages: redisinsight, gitlab-rails-ce-fips, wazuh-dashboard-fips, homepage, langfuse-fips, kubeflow-pipelines, vitess, opensearch-dashboards, opensearch-dashboards-fips, gitlab-rails-ce, argo-workflows, langfuse, code-server, kibana...

CVE-2026-45149 vulnerabilities

Vulnerabilities for packages: prism, renovate, actions-runner, langfuse-fips, vitess, opensearch-dashboards, opensearch-dashboards-fips, airflow, tileserver-gl-fips, npm, ts-patch, emscripten, pulumi, langfuse, tileserver-gl, lerna, kibana...

CVE-2026-45737 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, argo-cd...

CVE-2026-45738 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, argo-cd...

GHSA-RG3G-4RW9-GQRP vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, argo-cd...