de.adorsys.sts:keycloak-storage-provider (>=0.29.1, <=0.29.10), dk.grinn.keycloak:keycloak-migrate-resource (>=0.0.6, <=1.0.11) +9 more potentially affected by CVE-2026-37980 via org.keycloak:keycloak-services (6.0.1)

org.keycloak:keycloak-services MAVEN version 6.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - de.adorsys.sts:keycloak-storage-provider =0.29.1, =0.0.6, =0.0.6, =1.0.11 -...

fr.cnieg.keycloak:attribute-login-provider (1.3.7), org.keycloak:keycloak-crypto-fips1402 (22.0.2) +13 more potentially affected by CVE-2026-37980 via org.keycloak:keycloak-services (22.0.2)

org.keycloak:keycloak-services MAVEN version 22.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.keycloak:keycloak-services and may be impacted: - fr.cnieg.keycloak:attribute-login-provider 1.3.7 - org.keycloak:keycloak-crypto-fips1402 22.0.2 -...

PT-2026-34190

Name of the Vulnerable Software and Affected Versions Oxia versions prior to 0.16.2 Description The OIDC authentication provider unconditionally sets SkipClientIDCheck: true in the go-oidc verifier configuration. This disables the standard audience aud claim validation at the library level,...

Totolink A7100RU Router setDdnsCfg Arbitrary Command Execution

The vulnerability of the setDdnsCfg function /cgi-bin/cstecgi.cgi of the Totolink A7100RU router software relates to the failure to eliminate special elements used in the operating system’s command for processing the provider parameter. Exploiting this vulnerability allows a malicious actor to...

SUSE-SU-2026:21107-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

SUSE-SU-2026:21186-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

OPENSUSE-SU-2026:20525-1 Security update for openssl-3

This update for openssl-3 fixes the following issues: Security issues fixed: - CVE-2026-2673: TLS 1.3 servers may choose unexpected key agreement group bsc1259652. - CVE-2026-28387: potential use-after-free in DANE client code bsc1260441. - CVE-2026-28388: NULL pointer dereference when processing...

GHSA-FV83-X2XW-2J55 vulnerabilities

Vulnerabilities for packages: newrelic-infra-operator, dbmate, dgraph, flux-helm-controller, aws-load-balancer-controller, github-mcp-server, pluto, sftpgo-plugin-eventsearch, flux-notification-controller, mountpoint-s3-csi-driver, fluxcd-kustomize-mutating-webhook, malcontent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: trivy-operator, crossplane-provider-family-azure, step-ca, kpt, crossplane-provider-sql, kubernetes-csi-node-driver-registrar, gitness, openbao, spegel, weaviate, emissary, zot, syft, apisix-ingress-controller, sftpgo, etcd, timoni, argo-rollouts, k8s-device-plugin,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: trivy-operator, crossplane-provider-family-azure, step-ca, kpt, crossplane-provider-sql, kubernetes-csi-node-driver-registrar, gitness, openbao, spegel, weaviate, emissary, zot, syft, apisix-ingress-controller, sftpgo, etcd, timoni, argo-rollouts, k8s-device-plugin,...

CVE-2026-27140 vulnerabilities

Vulnerabilities for packages: controller-gen, zot, gitness, aws-s3-controller, checksec, cluster-proportional-autoscaler, k3d, nri-nginx, bazelisk, malcontent, timoni, rancher-system-upgrade-controller, step-kms-plugin, cluster-api-ipam-provider-in-cluster, capslock, yunikorn-web,...

CVE-2026-32281 vulnerabilities

Vulnerabilities for packages: controller-gen, zot, gitness, aws-s3-controller, cluster-proportional-autoscaler, k3d, nri-nginx, bazelisk, malcontent, timoni, rancher-system-upgrade-controller, step-kms-plugin, cluster-api-ipam-provider-in-cluster, yunikorn-web, harbor-scanner-trivy,...

CVE-2026-32283 vulnerabilities

Vulnerabilities for packages: controller-gen, zot, gitness, aws-s3-controller, cluster-proportional-autoscaler, k3d, nri-nginx, bazelisk, malcontent, timoni, rancher-system-upgrade-controller, step-kms-plugin, cluster-api-ipam-provider-in-cluster, yunikorn-web, harbor-scanner-trivy,...

GHSA-92MM-2PJQ-R785 vulnerabilities

Vulnerabilities for packages: conftest, terragrunt, zarf, syft, grype-fips, xeol-fips, terraform, kubescape-server-fips, chainctl-fips, cg, conftest-fips, tfsec, steampipe, trivy-operator-fips, grype-db, cloudbeat, trivy-operator, opentofu-fips, tflint-fips, cloudbeat-fips,...

CVE-2026-4660 vulnerabilities

Vulnerabilities for packages: conftest, terragrunt, zarf, syft, grype-fips, xeol-fips, terraform, kubescape-server-fips, chainctl-fips, cg, conftest-fips, tfsec, steampipe, trivy-operator-fips, grype-db, cloudbeat, trivy-operator, opentofu-fips, tflint-fips, cloudbeat-fips,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, helm-mapkubeapis, flannel, grafana-mimir, teleport-operator-fips, request-1279, consul, longhorn-engine, temporal, rancher-support-bundle-kit, cloud-provider-azure-fips,...

GHSA-X4JJ-H2V8-HQQV vulnerabilities

Vulnerabilities for packages: karpenter-fips, cephcsi, helm-mapkubeapis, licenseclassifier, nsc-fips, consul, cloud-provider-azure-fips, nats-server, newrelic-infrastructure-agent, flux-source-controller-fips, bento, xeol, oras-fips, prometheus-podman-exporter-fips, backup-restore-operator-fips,...

CVE-2026-32288 vulnerabilities

Vulnerabilities for packages: karpenter-fips, cephcsi, helm-mapkubeapis, licenseclassifier, nsc-fips, consul, cloud-provider-azure-fips, nats-server, newrelic-infrastructure-agent, flux-source-controller-fips, bento, xeol, oras-fips, prometheus-podman-exporter-fips, backup-restore-operator-fips,...

GHSA-5W89-2C2X-6X66 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, grafana-mimir, doppler-kubernetes-operator, yace, aws-network-policy-agent-fips, longhorn-engine, rancher-support-bundle-kit, crossplane-provider-aws-rolesanywhere, clickhouse-operator, terraform-provider-tls-fips, bento, xeol,...

GHSA-GJVH-7JH8-7XHM vulnerabilities

Vulnerabilities for packages: karpenter-fips, kubernetes-dashboard-auth-fips, cephcsi, memcached-exporter, helm-mapkubeapis, nsc-fips, flannel, kubevirt-cdi-apiserver-fips, grafana-mimir, wuzz, teleport-operator-fips, doppler-kubernetes-operator, request-1279, yace, aws-network-policy-agent-fips,...