CVE-2026-90711 vulnerabilities

Vulnerabilities for packages: tileserver-gl, jupyter-base-notebook, eco-jess, unleash, azurite, tensorflow-gpu-jupyter, http-https-echo-fips, langfuse-fips, thingsboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, kubescape-grype-offline-db, kubeflow-centraldashboard,...

GHSA-JQCG-44MW-7W3H vulnerabilities

Vulnerabilities for packages: tileserver-gl, jupyter-base-notebook, eco-jess, unleash, azurite, tensorflow-gpu-jupyter, http-https-echo-fips, langfuse-fips, thingsboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards, kubescape-grype-offline-db, kubeflow-centraldashboard,...

GHSA-G6X2-HCCM-HH4M vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, localstack, mlflow-fips, openstack-octavia-2025.2, openstack-keystone-2025.1-fips, airflow, openstack-keystone-2025.1, openstack-designate-2025.2, nemo-rl-cuda-13.0, superset, openstack-keystone-2025.2, nemo, openstack-octavia-2026.1,...

CVE-2026-102598 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, localstack, mlflow-fips, openstack-octavia-2025.2, openstack-keystone-2025.1-fips, airflow, openstack-keystone-2025.1, openstack-designate-2025.2, nemo-rl-cuda-13.0, superset, openstack-keystone-2025.2, nemo, openstack-octavia-2026.1,...

CVE-2026-90776 vulnerabilities

Vulnerabilities for packages: librechat, langfuse, unleash-fips, langfuse-fips...

GHSA-VM5R-23W9-M8HX vulnerabilities

Vulnerabilities for packages: librechat, langfuse, unleash-fips, langfuse-fips...

GHSA-FRJ6-5RHH-VWFW vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, unleash...

CVE-2026-82662 vulnerabilities

Vulnerabilities for packages: kibana, langfuse, langfuse-fips, unleash...

GHSA-68FV-2MGG-JV7Q vulnerabilities

Vulnerabilities for packages: renovate, jupyter-base-notebook, unleash, tensorflow-gpu-jupyter, langfuse-fips, authentik-fips, keep, opensearch-dashboards-fips, vitess, opensearch-dashboards, authentik, saf, keep-fips, rancher-api-ui, homepage, gitlab-rails-ce, langfuse, semaphore, arangodb,...

CVE-2026-93749 vulnerabilities

Vulnerabilities for packages: renovate, jupyter-base-notebook, unleash, tensorflow-gpu-jupyter, langfuse-fips, authentik-fips, keep, opensearch-dashboards-fips, vitess, opensearch-dashboards, authentik, saf, keep-fips, rancher-api-ui, homepage, gitlab-rails-ce, langfuse, semaphore, arangodb,...

CVE-2026-92599 vulnerabilities

Vulnerabilities for packages: unleash, thingsboard-fips, thingsboard, opensearch-dashboards-fips, opensearch-dashboards, gitlab-rails-ce-fips...

GHSA-MRX9-2RRP-RHPX vulnerabilities

Vulnerabilities for packages: unleash, thingsboard-fips, thingsboard, opensearch-dashboards-fips, opensearch-dashboards, gitlab-rails-ce-fips...

GHSA-65R4-943X-97JJ vulnerabilities

Vulnerabilities for packages: copybara-fips, elasticsearch-fips, apache-hop-fips, jbang, opensearch, copybara, apache-tika-fips, scala, elasticsearch, opensearch-fips, conductor, jmeter, nextflow, spdx-tools-java, apache-tika, wazuh-indexer, conductor-fips, apache-hop...

CVE-2026-75140 vulnerabilities

Vulnerabilities for packages: copybara-fips, elasticsearch-fips, apache-hop-fips, jbang, opensearch, copybara, apache-tika-fips, scala, elasticsearch, opensearch-fips, conductor, jmeter, nextflow, spdx-tools-java, apache-tika, wazuh-indexer, conductor-fips, apache-hop...

openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CLEANSTART-2026-OX02272 Security fix for GHSA-259r-337f-4rfw applied in: dex-fips 2.42.1-r5, nfs-subdir-external-provisioner 4.0.2-r2, temporal-server 1.31.3-r2

GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KO77933 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.18-r1

Security vulnerability affects the weaviate-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WK24368 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Security vulnerability affects the prometheus-redis-exporter-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...

CLEANSTART-2026-ZJ64953 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users

Security vulnerability affects the prometheus-redis-exporter-fips package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users...

CLEANSTART-2026-PD83002 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Security vulnerability affects the prometheus-redis-exporter-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...