PT-2026-113535

Name of the Vulnerable Software and Affected Versions Libreswan affected versions not specified Description When operating in FIPS mode, the software fails to delete badly formed received certificates from the NSS cache after rejecting them. This occurs because the add decoded cert function lacks...

CVE-2026-77205: Missing Release of Resource after Effective Lifetime

Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The...

tomcat: Tomcat: Cryptographic policy bypass via FIPS activation failure

A flaw was found in Apache Tomcat. When the server is configured to enforce FIPS Federal Information Processing Standards mode, a failure during FIPS activation causes Tomcat to log an error and continue running with standard non-FIPS cryptographic providers instead of terminating securely. This...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

TencentOS Server 3: osbuild-composer (TSSA-2026:1153)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2026:1153 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

GHSA-XV9C-MJW8-79GF vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

GHSA-M6VC-F87M-CC2H vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

CVE-2025-67202 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee-fips, commercial-gitlab-rails-ee...

wolfssl

Libreria SSL/TLS embedded wolfSSL La libreria SSL embedded wolfSSL precedentemente CyaSSL è una libreria SSL/TLS leggera scritta in ANSI C e pensata per ambienti embedded, RTOS e con risorse limitate - principalmente per via delle sue dimensioni ridotte, velocità e set di funzionalità. È...

GHSA-MRXV-65RV-6HXQ vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

GHSA-GF2Q-J2QQ-PJF2 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

GHSA-MWM8-39RW-8826 vulnerabilities

Vulnerabilities for packages: pact-broker-docker, pact-broker-docker-fips...

CVE-2012-3542 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

CVE-2012-4413 vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.2...

CVE-2026-106444 vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl, renovate, gitlab-rails-ce, wazuh-dashboard, verdaccio, lerna, opensearch-dashboards-fips, ts-patch, opensearch-dashboards, langfuse, tileserver-gl-fips, eco-jess, nextcloud-server, wazuh-dashboard-fips, kibana, prism, pelias-api,...

CVE-2026-106445 vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl, renovate, gitlab-rails-ce, wazuh-dashboard, verdaccio, lerna, opensearch-dashboards-fips, ts-patch, opensearch-dashboards, langfuse, tileserver-gl-fips, eco-jess, nextcloud-server, wazuh-dashboard-fips, kibana, prism, pelias-api,...

CVE-2026-106446 vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl, renovate, gitlab-rails-ce, wazuh-dashboard, verdaccio, lerna, opensearch-dashboards-fips, ts-patch, opensearch-dashboards, langfuse, tileserver-gl-fips, eco-jess, nextcloud-server, wazuh-dashboard-fips, kibana, prism, pelias-api,...

GHSA-XW65-4HP5-5HC7 vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl, renovate, gitlab-rails-ce, wazuh-dashboard, verdaccio, lerna, opensearch-dashboards-fips, ts-patch, opensearch-dashboards, langfuse, tileserver-gl-fips, eco-jess, nextcloud-server, wazuh-dashboard-fips, kibana, prism, pelias-api,...

GHSA-8R5X-FM3F-WHWJ vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl, renovate, gitlab-rails-ce, wazuh-dashboard, verdaccio, lerna, opensearch-dashboards-fips, ts-patch, opensearch-dashboards, langfuse, tileserver-gl-fips, eco-jess, nextcloud-server, wazuh-dashboard-fips, kibana, prism, pelias-api,...

GHSA-P8WG-VRV2-V86F vulnerabilities

Vulnerabilities for packages: langfuse-fips, tileserver-gl, renovate, gitlab-rails-ce, wazuh-dashboard, verdaccio, lerna, opensearch-dashboards-fips, ts-patch, opensearch-dashboards, langfuse, tileserver-gl-fips, eco-jess, nextcloud-server, wazuh-dashboard-fips, kibana, prism, pelias-api,...