Chromium: CVE-2026-17693 Inappropriate implementation in FileSystem

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-68577

Reserved via standalone CLI outside the OSIM flaw workflow; releasing so the CVE ID can be properly reserved and linked through OSIM when the flaw is worked...

CLEANSTART-2026-QN62418 Security fixes in opensearch-dashboards-fips 3.5.0-r0

Package opensearch-dashboards-fips version 3.5.0-r0 fixes 30 vulnerabilities: ghsa-jg4p-7fhp-p32p, ghsa-2w6w-674q-4c4q, ghsa-9cx6-37pm-9jff, ghsa-r5fr-rjxr-66jc, ghsa-3v7f-55p6-f55p...

CLEANSTART-2026-WT05389 Security fixes in strimzi-kafka-operator 0.50.1-r0

Package strimzi-kafka-operator version 0.50.1-r0 fixes 3 vulnerabilities: ghsa-72hv-8253-57qq, CVE-2025-11143, CVE-2026-1605...

CLEANSTART-2026-IE99306 Security fixes in elastic-beats-fips 9.0.8-r1

Package elastic-beats-fips version 9.0.8-r1 fixes 3 vulnerabilities: ghsa-j5w8-q4qc-rx2x, ghsa-f6x5-jh6r-wrfv, CVE-2025-47913...

CLEANSTART-2026-IV23706 Security fixes in kube-state-metrics 2.19.1-r0

Package kube-state-metrics version 2.19.1-r0 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-IK62257 Security fixes in miniforge3 25.11.0.1-r1

Package miniforge3 version 25.11.0.1-r1 fixes 6 vulnerabilities: ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-44431, CVE-2026-44432, ghsa-jp4c-xjxw-mgf9...

CLEANSTART-2026-DY99583 Security fixes in elastic-beats 9.2.8-r3

Package elastic-beats version 9.2.8-r3 fixes 2 vulnerabilities: ghsa-cp6g-7hqx-qxhp, CVE-2026-2303...

CLEANSTART-2026-YZ00347 Security fixes in argo-workflows 4.0.4-r0

Package argo-workflows version 4.0.4-r0 fixes 6 vulnerabilities: CVE-2026-34986, CVE-2026-39883, CVE-2026-39882, ghsa-hfvc-g4fc-pqhx, ghsa-w8rr-5gcm-pp58...

CLEANSTART-2026-ZK21652 Security fixes in renovate 43.123.6-r0

Package renovate version 43.123.6-r0 fixes 14 vulnerabilities: ghsa-3v7f-55p6-f55p, ghsa-c2c7-rcm5-vvqj, CVE-2026-33671, CVE-2026-33672, ghsa-r5fr-rjxr-66jc...

CLEANSTART-2026-QT14649 Security fixes in vault 2.0.0-r1

Package vault version 2.0.0-r1 fixes 35 vulnerabilities: CVE-2026-39821, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832, CVE-2026-39833...

CLEANSTART-2026-BA39475 Security fixes in external-secrets-fips 0.17.0-r2

Package external-secrets-fips version 0.17.0-r2 fixes 75 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2025-61726, CVE-2026-27143, CVE-2025-68121...

CLEANSTART-2026-HD18031 Security fixes in kyverno-policy-reporter-fips 3.3.2

Package kyverno-policy-reporter-fips version 3.3.2 fixes 3 vulnerabilities: CVE-2025-47907, CVE-2025-0913, CVE-2025-4673...

CLEANSTART-2026-DU91770 Security fixes in tigera-operator 1.41.1-r0

Package tigera-operator version 1.41.1-r0 fixes 34 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-27143, CVE-2026-33186, CVE-2026-39820, CVE-2026-25679...

CLEANSTART-2026-TI22065 Security fixes in velero 1.18.1-r0

Package velero version 1.18.1-r0 fixes 23 vulnerabilities: CVE-2026-42504, CVE-2026-27145, CVE-2026-42507, CVE-2026-39824, CVE-2026-39835...

CVE-2026-12139

Tanium addressed an information disclosure vulnerability in Connect...

CLEANSTART-2026-ZO99127 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex

Summary Multiple vulnerabilities were addressed in IBM Aspera Faspex 5.0.16 Vulnerability Details CVEID:CVE-2026-13676 DESCRIPTION: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode IDN hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not...

Chromium: CVE-2026-15764 Use after free in Ozone

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2026-44721

As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review. This review resulted in a software hardening release that addresses multiple internally discovered vulnerabilities. The...