GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: openstack-designate-2025.2, openstack-kolla-toolbox-2025.1-fips, openstack-tempest-2026.1, py3-hashin, openstack-kolla-toolbox-2026.1-fips, openstack-nova-2025.1, openstack-octavia-2026.1, openstack-keystone-2025.2, apache-beam-python-3.14-sdk, wazuh-manager-fips,...

CVE-2026-97688 vulnerabilities

Vulnerabilities for packages: openstack-designate-2025.2, openstack-kolla-toolbox-2025.1-fips, openstack-tempest-2026.1, py3-hashin, openstack-kolla-toolbox-2026.1-fips, openstack-nova-2025.1, openstack-octavia-2026.1, openstack-keystone-2025.2, apache-beam-python-3.14-sdk, wazuh-manager-fips,...

CVE-2026-97687 vulnerabilities

Vulnerabilities for packages: openstack-designate-2025.2, openstack-kolla-toolbox-2025.1-fips, openstack-tempest-2026.1, py3-hashin, openstack-kolla-toolbox-2026.1-fips, openstack-nova-2025.1, openstack-octavia-2026.1, openstack-keystone-2025.2, apache-beam-python-3.14-sdk, wazuh-manager-fips,...

GHSA-2GC4-CQFQ-P2GV vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, jupyter-base-notebook, gitlab-rails-ce-fips, gitlab-rails-ce, redisinsight...

CVE-2026-102599 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, commercial-gitlab-rails-ee-fips, jupyter-base-notebook, gitlab-rails-ce-fips, gitlab-rails-ce, redisinsight...

CVE-2026-81872 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, grafana-fips, kubescape-server, redpanda-operator, traefik-fips, grafana, elastic-agent, kubescape-server-fips, traefik, kubescape, starboard-exporter-fips, kubescape-operator-fips, starboard-exporter, kubescape-operator...

GHSA-HJF4-FPHR-2H65 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, grafana-fips, kubescape-server, redpanda-operator, traefik-fips, grafana, elastic-agent, kubescape-server-fips, traefik, kubescape, starboard-exporter-fips, kubescape-operator-fips, starboard-exporter, kubescape-operator...

Security Bulletin: IBM webMethods Integration Sever is affected by multiple CVEs related to Bouncy Castle for Java FIPS jars

Summary IBM webMethods Integration Sever uses third party Bouncy Castle for Java FIPS jars that are affected by multiple CVEs. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X...

CVE-2026-101912 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, homepage, renovate, wazuh-dashboard-fips, tileserver-gl-fips, sqlpad, librechat, kibana, lerna, unleash-proxy, actions-runner, wazuh-dashboard, npm, graalvm, prism, code-server,...

GHSA-H3MG-XC3C-68PW vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, homepage, renovate, wazuh-dashboard-fips, tileserver-gl-fips, sqlpad, librechat, kibana, lerna, unleash-proxy, actions-runner, wazuh-dashboard, npm, graalvm, prism, code-server,...

GHSA-J6R3-76F7-8JCV vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, homepage, renovate, wazuh-dashboard-fips, tileserver-gl-fips, sqlpad, librechat, kibana, lerna, unleash-proxy, actions-runner, wazuh-dashboard, npm, graalvm, prism, code-server,...

GHSA-QHR7-859C-M2P7 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, jupyter-base-notebook, commitizen, renovate, ts-patch, verdaccio, wazuh-dashboard-fips, arangodb, tileserver-gl-fips, sqlpad, redisinsight, kibana, unleash-fips, lerna,...

CVE-2026-102278 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, jupyter-base-notebook, commitizen, renovate, ts-patch, verdaccio, wazuh-dashboard-fips, arangodb, tileserver-gl-fips, sqlpad, redisinsight, kibana, unleash-fips, lerna,...

GHSA-Q2HR-2G5M-VWHR vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, jupyter-base-notebook, commitizen, renovate, ts-patch, verdaccio, wazuh-dashboard-fips, arangodb, tileserver-gl-fips, sqlpad, redisinsight, kibana, unleash-fips, lerna,...

CVE-2026-101911 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, homepage, renovate, wazuh-dashboard-fips, tileserver-gl-fips, sqlpad, librechat, kibana, lerna, unleash-proxy, actions-runner, wazuh-dashboard, npm, graalvm, prism, code-server,...

CVE-2026-102277 vulnerabilities

Vulnerabilities for packages: commercial-gitlab-rails-ee, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, jupyter-base-notebook, commitizen, renovate, ts-patch, verdaccio, wazuh-dashboard-fips, arangodb, tileserver-gl-fips, sqlpad, redisinsight, kibana, unleash-fips, lerna,...

CLEANSTART-2026-XS36799 Security fix for GHSA-p77j-4mvh-x3m3 applied in: kube-state-metrics-fips 2.18.0-r2

Security vulnerability affects the kube-state-metrics-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LY38808 Security fix for GHSA-hfvc-g4fc-pqhx applied in: kube-state-metrics-fips 2.18.0-r2

Security vulnerability affects the kube-state-metrics-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LJ85716 For certain crafted inputs, a 'ed25519

Security vulnerability affects the kube-state-metrics-fips package. For certain crafted inputs, a 'ed25519...

CLEANSTART-2026-TV66074 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

Security vulnerability affects the kube-state-metrics-fips package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...