5988 matches found
GHSA-65P9-R9H6-22VJ AWS-LC has Timing Side-Channel in AES-CCM Tag Verification
Summary AWS-LC is an open-source, general-purpose cryptographic library. Impact Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP...
CVE-2025-23419 vulnerabilities
Vulnerabilities for packages: ingress-nginx-controller, ingress-nginx-controller-fips...
GHSA-8FJ7-8H3W-XWFM vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, pluto, kubo, aws-ebs-csi-driver, kube-logging-operator, teleport-operator-fips, crossplane-provider-family-aws, dex-fips, flux-operator, cg, crossplane-provider-aws-ec2, bento, crossplane-provider-aws-kinesis-fips, bento-fips,...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, pluto, kubo, aws-ebs-csi-driver, kube-logging-operator, teleport-operator-fips, crossplane-provider-family-aws, dex-fips, flux-operator, cg, crossplane-provider-aws-ec2, bento, crossplane-provider-aws-kinesis-fips, bento-fips,...
RUSTSEC-2026-0043 Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...
Timing Side-Channel in AES-CCM Tag Verification in AWS-LC
Observable timing discrepancy in AES-CCM decryption in AWS-LC allows an unauthenticated user to potentially determine authentication tag validity via timing analysis. The impacted implementations are through the EVP CIPHER API: EVPaes128ccm, EVPaes192ccm, and EVPaes256ccm. Customers of AWS servic...
CVE-2026-24051 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, teleport-operator-fips, cloudprober, eck-operator-fips, headlamp, spicedb-fips, azuredisk-csi-fips, falcosidekick-fips, istio-fips, kubernetes-csi-external-health-monitor, kaniko, skaffold, cass-operator-fips, syft,...
GHSA-9H8M-3FM2-QJRQ vulnerabilities
Vulnerabilities for packages: kubernetes-csi-external-resizer-fips, teleport-operator-fips, cloudprober, eck-operator-fips, headlamp, spicedb-fips, azuredisk-csi-fips, falcosidekick-fips, istio-fips, kubernetes-csi-external-health-monitor, kaniko, skaffold, cass-operator-fips, syft,...
OESA-2026-1466 openssl security update
OpenSSL is a robust, commercial-grade, and full-featured toolkit for the Transport Layer Security TLS and Secure Sockets Layer SSL protocols. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes c...
CVE-2026-27896 vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, osv-scanner, github-mcp-server, gitlab-workhorse-ce, flux-operator-fips, flux-operator, gitlab-workhorse-ce-fips, gptscript, datadog-agent, jaeger, jaeger-fips, opencost-fips, opencost, ferretdb...
GHSA-WVJ2-96WP-FQ3F vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, osv-scanner, github-mcp-server, gitlab-workhorse-ce, flux-operator-fips, flux-operator, gitlab-workhorse-ce-fips, gptscript, datadog-agent, jaeger, jaeger-fips, opencost-fips, opencost, ferretdb...
CLEANSTART-2026-LS98939 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-YW12690 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-QC30410 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...
CLEANSTART-2026-ID51598 Cancelling a query (e
Multiple security vulnerabilities affect the kyverno-fips package. Cancelling a query e. See references for individual vulnerability details...
CLEANSTART-2026-DZ05206 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-WP10148 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...
CLEANSTART-2026-AC12204 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-AJ16639 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Multiple security vulnerabilities affect the argo-cd-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...
CLEANSTART-2026-ER93728 go-git is a highly extensible git implementation library written in pure Go
Multiple security vulnerabilities affect the argo-cd-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...