CVE-2026-102992 vulnerabilities

Vulnerabilities for packages: cursor-agent, kibana, langfuse-fips...

GHSA-67C8-PQHQ-4RMX vulnerabilities

Vulnerabilities for packages: cursor-agent, kibana, langfuse-fips...

SUSE CVE-2026-71892

In Bouncy Castle for Java before 1.86, the opt-in key-size validation on CMS key-transport recipients, org.bouncycastle.cms.jcajce.JceKeyTransRecipient.setKeySizeValidationtrue, never ran for a message using RFC 9709 content-encryption key derivation id-alg-cek-hkdf-sha256. The branch that should...

XRDP Server FIPS RDP DoS

The vulnerability of the XRDP server’s FIPS-protected RDP packets relates to the execution of operations outside the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

GHSA-MHVH-FQ92-PFMR vulnerabilities

Vulnerabilities for packages: superset-fips, superset, authentik-fips, authentik...

CVE-2026-77387 vulnerabilities

Vulnerabilities for packages: superset-fips, superset, authentik-fips, authentik...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, librechat, opensearch-dashboards-fips, opensearch-dashboards, langfuse...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, librechat, opensearch-dashboards-fips, opensearch-dashboards, langfuse...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: caddy, dapr, kyverno-policy-reporter-ui, rclone, tkn-fips, gitness, tkn, step-issuer, telegraf, step-ca, gogatekeeper, step-issuer-fips, cloudflared, dapr-fips, sftpgo, kyverno-policy-reporter-ui-fips, step-ca-fips, step, karma, buf, caddy-fips, rclone-fips, step-fip...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: caddy, dapr, kyverno-policy-reporter-ui, rclone, tkn-fips, gitness, tkn, step-issuer, telegraf, step-ca, gogatekeeper, step-issuer-fips, cloudflared, dapr-fips, sftpgo, kyverno-policy-reporter-ui-fips, step-ca-fips, step, karma, buf, caddy-fips, rclone-fips, step-fip...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: kibana, wazuh-dashboard-fips, awx, langfuse-fips, librechat, wazuh-dashboard, tensorflow-gpu-jupyter, opensearch-dashboards-fips, gitlab-rails-ce, jupyter-base-notebook, opensearch-dashboards, nextcloud-server, gitlab-rails-ce-fips, langfuse...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71889 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536909...

com.ascentstream.pulsar:bcfips-include-test (>=2.10.6.9, <=3.0.8.0-snapshot-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=2.10.6.9, <=3.0.14.1) +20 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=1.0.1, <=1.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.1, =2.10.6.9, =2.10.6.9, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =1.0.0, =1.0.0, =3.0.0-rc1, =3.0.0-rc6, =1.0.0, =1.0.1 - io.skuber:skuber-examples2.12 2.6.3 - io.skuber:skuber-examples2.13 2.6.3 and more Source cves: CVE-2026-71888 Source advisor...

com.itextpdf:bouncy-castle-fips-adapter (>=9.6.0, <=9.8.0), com.pkixops:pkixops-crypto (1.5.2) +165 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.1.8, <=2.1.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.1.8, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =1.192.0, =2.56.0 and more Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536979...

com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321, <=5.0.4-1329) +15 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.1.4, <=2.1.7)

org.bouncycastle:bcutil-fips MAVEN version =2.1.4, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =9.6.0, =2.5.2, =2.5.2, =3.6.5, =5.1.0, =5.2.0 and more Source cves: CVE-2026-71888https://vulners.com...

com.ascentstream.pulsar:bcfips-include-test (>=3.0.7.0-snapshot-a030c50, <=3.0.8.0-snapshot-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.7.0-snapshot-a030c50, <=3.0.14.1) +11 more potentially affected by CVE-2026-71889 via org.bouncycastle:bcpkix-fips (>=1.0.5, <=1.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =1.0.5, =3.0.7.0-snapshot-a030c50, =3.0.7.0-snapshot-a030c50, =2.1.2, =8.0.0, =1.2.0, =1.17.0, =1.17.0, =3.1.0, =master-rc-daily, =master-rc-daily, =3.13.14, =3.0.0, =19.0.0, =25.0.6 Source cves: CVE-2026-71889 Source advisory:...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the CMSAuthenticatedDataParser process. An attacker can cause unauthorized attribute injection by crafting a message where the digestAlgorithm field is absent but authAttrs is present,...

Improper Validation of Integrity Check Value

Overview Affected versions of this package are vulnerable to Improper Validation of Integrity Check Value in the CMSAuthenticatedDataParser process. An attacker can cause unauthorized attribute injection by crafting a message where the digestAlgorithm field is absent but authAttrs is present,...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.14.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.4.0, <=9.5.0) +19 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcutil-fips (>=2.0.3, <=2.0.7)

org.bouncycastle:bcutil-fips MAVEN version =2.0.3, =3.0.16.0, =9.4.0, =4.0.7.1, =4.0.7.1, =3.0.15, =3.22.0, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 and more Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536971...

com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.16.0, <=4.0.14.0), com.itextpdf:bouncy-castle-fips-adapter (>=9.0.0, <=9.5.0) +10 more potentially affected by CVE-2026-71888 via org.bouncycastle:bcpkix-fips (>=2.0.7, <=2.0.12)

org.bouncycastle:bcpkix-fips MAVEN version =2.0.7, =3.0.16.0, =9.0.0, =4.0.7.1, =4.0.7.1, =3.0.15, =26.0.0, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0-beta1, =3.0.0 Source cves: CVE-2026-71888 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-20536979...