8304 matches found
ROOT-APP-MAVEN-CVE-2026-13506 CVE-2026-13506 in org.bouncycastle:bc-fips - Patched by Root
Root has patched CVE-2026-13506 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...
GO-2026-6860 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticsearch-fips, crossplane-provider-aws-glacier-fips, prometheus-mongodb-exporter, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-pinpoint, crossplane-provider-aws-iot, hydra-fips, crossplane-provider-aws-guardduty-fips,...
CVE-2026-78661 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-elasticsearch-fips, crossplane-provider-aws-glacier-fips, prometheus-mongodb-exporter, crossplane-provider-aws-kinesis-fips, crossplane-provider-aws-pinpoint, crossplane-provider-aws-iot, hydra-fips, crossplane-provider-aws-guardduty-fips,...
CVE-2026-112906 vulnerabilities
Vulnerabilities for packages: mlflow-fips, mlflow...
CVE-2026-112914 vulnerabilities
Vulnerabilities for packages: mlflow-fips, mlflow...
GHSA-2G95-WG33-C5X2 vulnerabilities
Vulnerabilities for packages: mlflow-fips, mlflow...
GHSA-CRV4-6MHJ-J5JH vulnerabilities
Vulnerabilities for packages: mlflow-fips, mlflow...
GHSA-JQC4-5CVW-7W85 vulnerabilities
Vulnerabilities for packages: mlflow-fips, mlflow...
CVE-2026-112937 vulnerabilities
Vulnerabilities for packages: mlflow-fips, mlflow...
SUSE CVE-2026-77205
Libreswan in FIPS mode has a vulnerability where badly formed received certificates are rejected, but not deleted from the NSS cache. As a result, any real certificates with the same serial number are rejected as well. This can be abused to lock out legitimate peers from connecting. The...
GHSA-MRHX-C7XC-M3W5 vulnerabilities
Vulnerabilities for packages: kibana, openspec-fips, langfuse-fips, code-server, authentik-fips, langfuse, opensearch-dashboards-fips, rstudio, dotstatsuite-supercore, openspec, arangodb, opensearch-dashboards, vitess, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, authentik...
CVE-2023-54404 vulnerabilities
Vulnerabilities for packages: kibana, openspec-fips, langfuse-fips, code-server, authentik-fips, langfuse, opensearch-dashboards-fips, rstudio, dotstatsuite-supercore, openspec, arangodb, opensearch-dashboards, vitess, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, authentik...
golang-fips: Golang FIPS zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System...
golang-fips: Golang FIPS zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
Important: Red Hat Security Advisory: rhc security update
An update for rhc is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
GHSA-XCX6-JX8P-X3H5 vulnerabilities
Vulnerabilities for packages: saf, redisinsight, dbgate-fips, azurite, librechat...
CVE-2026-109461 vulnerabilities
Vulnerabilities for packages: saf, redisinsight, dbgate-fips, azurite, librechat...