12 matches found
SUSE CVE-2026-55653
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...
CVE-2026-42295 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, argo-workflows, argo-workflows-fips, kubeflow-pipelines-driver-fips, kubeflow-pipelines...
CVE-2026-44487 vulnerabilities
Vulnerabilities for packages: nextcloud-server, arangodb, wazuh-dashboard-fips, kubeflow-katib, opensearch-dashboards, wazuh-dashboard, awx, gitlab-rails-ce-fips, gitlab-rails-ce, opensearch-dashboards-fips...
GHSA-2VQW-3MP8-CGMX vulnerabilities
Vulnerabilities for packages: gitlab-cng, logstash-fips, gitlab-rails-ce-fips, gitlab-rails-ce, logstash...
GHSA-98QH-XJC8-98PQ vulnerabilities
Vulnerabilities for packages: keycloak-fips, seata, ghidra, apache-hop-fips, flyway, nacos, camunda-zeebe, dependency-track, druid, kayenta-fips, sonarqube, hono, dependency-track-apiserver, apicurio-registry, kayenta, thingsboard, geoserver, nacos-docker, apache-hop, debezium, nuxeo, camunda,...
GHSA-8Q2W-WR49-WHQJ vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GHSA-475M-QJ5V-HVQ3 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
GHSA-6V4W-CQRG-XV3G vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
EUVD-2025-35896
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...
CVE-2023-3089
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated...