GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, thingsboard, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, apache-hop-fips, pinot, seata, pinot-fips, tez, hadoop-fips, trino, celeborn...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, thingsboard, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.0, apache-hop-fips, pinot, seata, pinot-fips, tez, hadoop-fips, trino, celeborn...

CVE-2026-71491 vulnerabilities

Vulnerabilities for packages: airflow, openstack-keystone-2026.1-fips, openstack-glance-2025.1-fips, authentik-fips, openstack-placement-2025.2, airflow-core, authentik, datahub-ingestion-fips, datahub-ingestion, superset, mlflow-fips, openstack-nova-2026.1, openstack-placement-2025.2-fips,...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: neo4j, airbyte-server-fips, apache-pulsar-fips, elasticsearch-fips, wazuh-indexer, s3proxy-fips, management-api-for-apache-cassandra-4.0, seata, elasticsearch, cruise-control-fips, traccar, celeborn, hono, floci-az, conductor, druid, kafbat-ui-fips, spark-fips,...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: neo4j, airbyte-server-fips, apache-pulsar-fips, elasticsearch-fips, wazuh-indexer, s3proxy-fips, management-api-for-apache-cassandra-4.0, seata, elasticsearch, cruise-control-fips, traccar, celeborn, hono, floci-az, conductor, druid, kafbat-ui-fips, spark-fips,...

GHSA-GQGW-JGHV-MXWX vulnerabilities

Vulnerabilities for packages: netbox-fips...

CVE-2026-9318 vulnerabilities

Vulnerabilities for packages: netbox-fips...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: virt-handler-fips, hubble-fips, milvus, containerd-fips, beats-fips, nerdctl, rke2-runtime, gitaly-fips, falcoctl-fips, delve, hubble-ui, envoy-gateway-fips, k3s, elastic-agent-fips, kubescape-server, agentbeat, kuma, falcoctl, kubescape-operator, witness,...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: virt-handler-fips, hubble-fips, milvus, containerd-fips, beats-fips, nerdctl, rke2-runtime, gitaly-fips, falcoctl-fips, delve, hubble-ui, envoy-gateway-fips, k3s, elastic-agent-fips, kubescape-server, agentbeat, kuma, falcoctl, kubescape-operator, witness,...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Moderate: Red Hat Security Advisory: butane security update

An update for butane is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Moderate: Red Hat Security Advisory: butane security update

An update for butane is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2026-46603 vulnerabilities

Vulnerabilities for packages: mattermost, seaweedfs-fips, rclone-fips, pdfcpu, seaweedfs-rocksdb, gitea, fortio-fips, seaweedfs-rocksdb-fips, mailpit, seaweedfs, rclone, kubescape-server, bento, gitea-fips, kitty, fortio, seaweedfs-operator-fips, nemo, mattermost-fips, kubescape, ollama-fips,...

GHSA-XC2P-8GGW-6CR5 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-snapshotter, kubevirt-cdi-uploadserver, pgpool2exporter, kgateway-fips, knative-storage-migrate-fips, nri-mysql-fips, smarter-device-manager, rancher-helm, zabbix, external-dns-fips, terraform-provider-grafana-fips, maru, kind,...

CVE-2026-73653 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-48P8-G2FX-3WWM vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-fips, kubeflow-pipelines, kubeflow-pipelines-driver-fips...

GHSA-QV9R-C865-CP47 vulnerabilities

Vulnerabilities for packages: neo4j, airbyte-server-fips, strimzi-kafka-operator, apache-pulsar-fips, sonarqube, elasticsearch-fips, wazuh-indexer, apache-tika, apache-activemq-fips, kafka, elasticsearch, cruise-control-fips, apache-activemq, traccar, celeborn, solr-fips, hono,...

CVE-2026-73643 vulnerabilities

Vulnerabilities for packages: renovate, kubeflow-pipelines, authentik-fips...

CVE-2026-56853 vulnerabilities

Vulnerabilities for packages: rancher-pushprox, aws-fsx-csi-driver, kubernetes-csi-external-snapshotter, crossplane-provider-aws-osis-fips, kubevirt-cdi-uploadserver, beats-fips, crossplane-provider-aws-codepipeline-fips, kubernetes-dashboard-api, dgraph, pgpool2exporter, contour-fips,...