com.snowflake:snowpark-fips (1.8.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.13.28)

net.snowflake:snowflake-jdbc-fips MAVEN version 3.13.28 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips 1.8.0 Source cves: CVE-2026-86597 Source advisory:...

com.snowflake:snowpark-fips (>=1.2.0, <=1.7.2) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc-fips (3.13.14)

net.snowflake:snowflake-jdbc-fips MAVEN version 3.13.14 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc-fips and may be impacted: - com.snowflake:snowpark-fips =1.2.0, =1.7.2 Source cves: CVE-2026-86597 Source advisory:...

CVE-2026-19484 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, langfuse, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce...

GHSA-XJH9-V7X6-24JW vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, langfuse, gitlab-rails-ce-fips, langfuse-fips, gitlab-rails-ce...

CVE-2026-102992 vulnerabilities

Vulnerabilities for packages: cursor-agent, langfuse-fips, kibana...

GHSA-67C8-PQHQ-4RMX vulnerabilities

Vulnerabilities for packages: cursor-agent, langfuse-fips, kibana...

SUSE CVE-2026-71892

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

XRDP Server FIPS RDP DoS

The vulnerability of the XRDP server’s FIPS-protected RDP packets relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2026-77387 vulnerabilities

Vulnerabilities for packages: authentik, superset, authentik-fips, superset-fips...

GHSA-MHVH-FQ92-PFMR vulnerabilities

Vulnerabilities for packages: authentik, superset, authentik-fips, superset-fips...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, librechat, kibana, langfuse, opensearch-dashboards, langfuse-fips...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, librechat, kibana, langfuse, opensearch-dashboards, langfuse-fips...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: gogatekeeper, dapr-fips, telegraf, tkn-fips, dapr, kyverno-policy-reporter-ui, step-issuer, gitness, step-ca-fips, rclone-fips, rclone, step-ca, cloudflared, step-fips, step-issuer-fips, kyverno-policy-reporter-ui-fips, tkn, caddy, step, sftpgo, caddy-fips, buf, karm...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: gogatekeeper, dapr-fips, telegraf, tkn-fips, dapr, kyverno-policy-reporter-ui, step-issuer, gitness, step-ca-fips, rclone-fips, rclone, step-ca, cloudflared, step-fips, step-issuer-fips, kyverno-policy-reporter-ui-fips, tkn, caddy, step, sftpgo, caddy-fips, buf, karm...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, jupyter-base-notebook, awx, librechat, wazuh-dashboard, kibana, langfuse, gitlab-rails-ce-fips, opensearch-dashboards, langfuse-fips, gitlab-rails-ce, tensorflow-gpu-jupyter, wazuh-dashboard-fips, nextcloud-server...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the CMSAuthenticatedDataParser process. An attacker can cause unauthorized attribute injection by crafting a message where the digestAlgorithm field is absent but authAttrs is present,...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the CMSAuthenticatedDataParser process. An attacker can cause unauthorized attribute injection by crafting a message where the digestAlgorithm field is absent but authAttrs is present,...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536909...

com.ascentstream.pulsar:bcfips-include-test (>=2.10.6.9, <=3.0.8.0-snapshot-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=2.10.6.9, <=3.0.14.1) +20 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=1.0.1, <=1.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.1, =2.10.6.9, =2.10.6.9, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =1.0.0, =1.0.0, =3.0.0-rc1, =3.0.0-rc6, =1.0.0, =1.0.1 - io.skuber:skuber-examples2.12 2.6.3 - io.skuber:skuber-examples2.13 2.6.3 and more Source cves: CVE-2026-71888 Source advisor...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536979...