SymCrypt-OpenSSL

SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...

wolfGuard

WolfGuard VPN con criptografía FIPS 140-3 WolfGuard es la refactorización compatible con FIPS de wolfSSL del WireGuard basado en el kernel de Linux, originalmente diseñado y escrito por Jason Donenfeld. El uso es esencialmente idéntico. Hay dos componentes principales de WolfGuard: el módulo del...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, librechat, opensearch-dashboards-fips, langfuse-fips, kibana...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, librechat, opensearch-dashboards-fips, langfuse-fips, kibana...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: karma, caddy-fips, kyverno-policy-reporter-ui, step-issuer, kyverno-policy-reporter-ui-fips, gogatekeeper, telegraf, caddy, tkn-fips, sftpgo, step-issuer-fips, gitness, dapr, buf, step-ca-fips, dapr-fips, cloudflared, step, rclone, tkn, step-fips, step-ca, rclone-fip...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: karma, caddy-fips, kyverno-policy-reporter-ui, step-issuer, kyverno-policy-reporter-ui-fips, gogatekeeper, telegraf, caddy, tkn-fips, sftpgo, step-issuer-fips, gitness, dapr, buf, step-ca-fips, dapr-fips, cloudflared, step, rclone, tkn, step-fips, step-ca, rclone-fip...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: awx, langfuse, nextcloud-server, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce, langfuse-fips, gitlab-rails-ce-fips, kibana, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-71892

Bouncy Castle for Java versions before 1.86 contain a flaw where opt-in key-size validation on CMS key-transport recipients fails for messages using RFC 9709 content-encryption key derivation (id-alg-cek-hkdf-sha256 ). The root cause is an incorrect comparison between a byte array and an ASN1Obje...

wolfssl

Bibliothèque SSL/TLS embarquée wolfSSL La bibliothèque SSL embarquée wolfSSL anciennement CyaSSL est une bibliothèque SSL/TLS légère écrite en ANSI C et destinée aux environnements embarqués, RTOS et à ressources limitées - principalement en raison de sa petite taille, de sa rapidité et de son...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: cruise-control, hono, wavefront-proxy, kafbat-ui, cass-config-builder-fips, flyway-fips, dependency-track-apiserver, logstash, thingsboard, ontop, cassandra-fips, kates, seata, airbyte-platform-fips, tez, flink-kubernetes-operator, strimzi-kafka-operator, cassandra,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: cruise-control, hono, wavefront-proxy, kafbat-ui, cass-config-builder-fips, flyway-fips, dependency-track-apiserver, logstash, thingsboard, ontop, cassandra-fips, kates, seata, airbyte-platform-fips, tez, flink-kubernetes-operator, strimzi-kafka-operator, cassandra,...

GO-2026-6615 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, grafana-fips, elastic-agent, grafana...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: buildah-fips, argo-cd, kubescape-operator-fips, argo-workflows, crossplane-provider-gcp-beta-cloudplatform-fips, beats, redis-operator, longhorn-manager-fips, gitlab-cng-fips, crossplane-provider-kubernetes, teleport-operator-fips, sops, kyverno-notation-aws-fips,...

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...

EUVD-2026-91236

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: langfuse, unleash-fips, librechat...

CVE-2026-101899 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, lambda-nodejs, langfuse, nextcloud-server, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce, langfuse-fips, prism, gitlab-rails-ce-fips, kibana, semaphore, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-101906 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, lambda-nodejs, langfuse, nextcloud-server, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce, langfuse-fips, prism, gitlab-rails-ce-fips, kibana, semaphore, wazuh-dashboard-fips, wazuh-dashboard...

GHSA-542G-H47M-68V8 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, lambda-nodejs, langfuse, nextcloud-server, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce, langfuse-fips, prism, gitlab-rails-ce-fips, kibana, semaphore, wazuh-dashboard-fips, wazuh-dashboard...

CVE-2026-101898 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, lambda-nodejs, langfuse, nextcloud-server, opensearch-dashboards, librechat, opensearch-dashboards-fips, gitlab-rails-ce, langfuse-fips, prism, gitlab-rails-ce-fips, kibana, semaphore, wazuh-dashboard-fips, wazuh-dashboard...