Security Bulletin: Security vulnerabilities have been found in IBM Verify Directory (Container)

Summary Security vulnerabilities have been addressed in IBM Verify Directory Container Vulnerability Details CVEID:CVE-2025-36047 DESCRIPTION: IBM WebSphere Application Server Liberty 18.0.0.2 through 25.0.0.8 is vulnerable to a denial of service, caused by sending a specially-crafted request. A...

GHSA-7XRH-HQFC-G7QR vulnerabilities

Vulnerabilities for packages: solr, akhq, spark, seata, apache-activemq-artemis, apache-pulsar, zookeeper, spark-kubernetes-operator-fips, trino, zookeeper-fips, spark-kubernetes-operator, apache-nifi, kafka, kserve-modelmesh, strimzi-kafka-operator, apache-pulsar-fips, spark-fips, wso2is...

CVE-2026-24281 vulnerabilities

Vulnerabilities for packages: solr, akhq, spark, seata, apache-activemq-artemis, apache-pulsar, zookeeper, spark-kubernetes-operator-fips, trino, zookeeper-fips, spark-kubernetes-operator, apache-nifi, kafka, kserve-modelmesh, strimzi-kafka-operator, apache-pulsar-fips, spark-fips, wso2is...

GHSA-9PPJ-QMQM-Q256 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, py3-jupyterlab, kubeflow-centraldashboard, opensearch-dashboards, graalvm, node-gyp, tileserver-gl, gitlab-rails-ce, gemini-cli, drupal, pnpm-stage0, lerna, wazuh-dashboard-fips, wazuh-dashboard, tensorflow-cpu-jupyter, renovate,...

GHSA-V8W9-8MX6-G223 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, langfuse-fips, opensearch-dashboards, kibana, librechat, langfuse...

CVE-2026-31802 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, py3-jupyterlab, kubeflow-centraldashboard, opensearch-dashboards, graalvm, node-gyp, tileserver-gl, gitlab-rails-ce, gemini-cli, drupal, pnpm-stage0, lerna, wazuh-dashboard-fips, wazuh-dashboard, tensorflow-cpu-jupyter, renovate,...

gnutls security update

3.8.3-10fips - Add FIPS package change: add fips suffix to Release and set Epoch to 10 Orabug: 35925409 - Update FIPS module name for Oracle Linux Orabug: 35925409 3.8.3-10 - Fix PKCS11 token initialization label overflow CVE-2025-9820 - Fix name constraint processing performance issue...

CVE-2022-29164 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips...

GHSA-CMV8-6362-R5W9 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips...

CVE-2026-27138 vulnerabilities

Vulnerabilities for packages: nova-fips, dkron, aws-load-balancer-controller-fips, aws-ebs-csi-driver-fips, flux-helm-controller, nova, victoriametrics-cluster, flux-fips, cluster-autoscaler-fips, pluto, flux-notification-controller, flux-image-automation-controller, aws-ebs-csi-driver,...

GHSA-7HFW-R8QC-89V4 vulnerabilities

Vulnerabilities for packages: nova-fips, dkron, aws-load-balancer-controller-fips, aws-ebs-csi-driver-fips, flux-helm-controller, nova, victoriametrics-cluster, flux-fips, cluster-autoscaler-fips, pluto, flux-notification-controller, flux-image-automation-controller, aws-ebs-csi-driver,...

GHSA-PH5J-38MG-J6HP vulnerabilities

Vulnerabilities for packages: nova-fips, dkron, aws-load-balancer-controller-fips, aws-ebs-csi-driver-fips, flux-helm-controller, nova, victoriametrics-cluster, flux-fips, cluster-autoscaler-fips, pluto, flux-notification-controller, flux-image-automation-controller, aws-ebs-csi-driver,...

CVE-2026-27137 vulnerabilities

Vulnerabilities for packages: nova-fips, dkron, aws-load-balancer-controller-fips, aws-ebs-csi-driver-fips, flux-helm-controller, nova, victoriametrics-cluster, flux-fips, cluster-autoscaler-fips, pluto, flux-notification-controller, flux-image-automation-controller, aws-ebs-csi-driver,...

CVE-2026-24308 vulnerabilities

Vulnerabilities for packages: solr, akhq, spark, spark-kubernetes-operator-fips, zookeeper-fips, kafka, strimzi-kafka-operator, zookeeper, druid, trino, apache-nifi, kserve-modelmesh, apache-pulsar-fips, spark-fips, apache-activemq-artemis, wso2is, tez, seata, apache-pulsar,...

GHSA-CRHR-QQJ8-RPXC vulnerabilities

Vulnerabilities for packages: solr, akhq, spark, spark-kubernetes-operator-fips, zookeeper-fips, kafka, strimzi-kafka-operator, zookeeper, druid, trino, apache-nifi, kserve-modelmesh, apache-pulsar-fips, spark-fips, apache-activemq-artemis, wso2is, tez, seata, apache-pulsar,...

CVE-2026-25679 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, flux-image-reflector-controller-fips, knative-eventing-fips, aws-signer-notation-plugin, aws-load-balancer-controller-fips, kubernetes-event-exporter, pguser, seaweedfs-operator, amass, k8s-device-plugin, kube-oidc-proxy,...

GHSA-J4J7-VW47-RHFQ vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, flux-image-reflector-controller-fips, knative-eventing-fips, kubernetes-event-exporter, seaweedfs-operator, k8s-device-plugin, kube-oidc-proxy, ingress-nginx-controller, json-exporter-fips, crossplane-function-environment-configs, litestream...

GHSA-J3GX-2473-5FP8 vulnerabilities

Vulnerabilities for packages: sftpgo-plugin-eventstore, flux-image-reflector-controller-fips, knative-eventing-fips, aws-signer-notation-plugin, aws-load-balancer-controller-fips, kubernetes-event-exporter, pguser, seaweedfs-operator, amass, k8s-device-plugin, kube-oidc-proxy,...

CLEANSTART-2026-AB04032 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Multiple security vulnerabilities affect the fluent-operator-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-OH74241 Security fixes for GHSA-MQQF-5WVP-8FH8 applied in versions: 0.122-r0

Security vulnerability affects the karma-fips package. This issue is resolved in later releases. See references for vulnerability details...