8327 matches found
CVE-2026-75140 vulnerabilities
Vulnerabilities for packages: conductor, opensearch-fips, elasticsearch-fips, apache-tika-fips, apache-hop, wazuh-indexer, apache-tika, jmeter, jbang, opensearch, elasticsearch, copybara-fips, copybara, apache-hop-fips, nextflow, conductor-fips, spdx-tools-java, scala...
openssh: Double free in Red Hat Enterprise Linux versions of OpenSSH DH-GEX client path during FIPS known-group validation leads to client-side denial of service
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...
CLEANSTART-2026-OX02272 Security fix for GHSA-259r-337f-4rfw applied in: dex-fips 2.42.1-r5, nfs-subdir-external-provisioner 4.0.2-r2, temporal-server 1.31.3-r2
GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KO77933 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.18-r1
Security vulnerability affects the weaviate-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ZJ64953 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users
Security vulnerability affects the prometheus-redis-exporter-fips package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users...
CLEANSTART-2026-WK24368 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process
Security vulnerability affects the prometheus-redis-exporter-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process...
CLEANSTART-2026-PD83002 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption
Security vulnerability affects the prometheus-redis-exporter-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...
CLEANSTART-2026-FK94872 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read
Security vulnerability affects the prometheus-redis-exporter-fips package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read...
CLEANSTART-2026-UP96283 filippo
Security vulnerability affects the dex-fips package. filippo...
CLEANSTART-2026-TW34089 goxmlsig provides XML Digital Signatures implemented in Go
Security vulnerability affects the dex-fips package. goxmlsig provides XML Digital Signatures implemented in Go...
CLEANSTART-2026-RF76675 go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP
Security vulnerability affects the dex-fips package. go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP...
PT-2026-115345
Security vulnerability affects the weaviate-fips package. This issue is resolved in later releases. See references for vulnerability details...
com.snowflake:snowpark-fips (1.9.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.14.1)
net.snowflake:snowflake-jdbc-fips MAVEN version 3.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips 1.9.0 Source cves: CVE-2026-86597 Source advisory:...
com.snowflake:snowpark-fips (>=1.10.0, <=1.13.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.14.4)
net.snowflake:snowflake-jdbc-fips MAVEN version 3.14.4 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.10.0, =1.13.2 Source cves: CVE-2026-86597 Source advisory:...
com.snowflake:snowpark-fips (>=1.14.0, <=1.15.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.17.0)
net.snowflake:snowflake-jdbc-fips MAVEN version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.14.0, =1.15.0 Source cves: CVE-2026-86597 Source advisory:...
com.snowflake:snowpark-fips (>=1.16.0, <=1.16.1), com.snowflake:snowpark-fips_2.12 (>=1.17.0, <=1.18.0) +1 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.24.2)
net.snowflake:snowflake-jdbc-fips MAVEN version 3.24.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.16.0, =1.17.0, =1.17.0, =1.18.0 Source cves: CVE-2026-86597...
com.snowflake:snowpark-fips (1.8.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.13.28)
net.snowflake:snowflake-jdbc-fips MAVEN version 3.13.28 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips 1.8.0 Source cves: CVE-2026-86597 Source advisory:...
com.snowflake:snowpark-fips (>=1.2.0, <=1.7.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.13.14)
net.snowflake:snowflake-jdbc-fips MAVEN version 3.13.14 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.2.0, =1.7.2 Source cves: CVE-2026-86597 Source advisory:...