GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-keystone-2026.1-fips, airflow-core, kserve, netbox-fips, openstack-keystone-2025.2, openstack-placement-2025.1, datadog-agent, litellm, superset-fips, openstack-horizon-2025.1, openstack-glance-2026.1, openstack-glance-2025.2-fips,...

CVE-2026-5446

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wcAriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, cert-manager-csi-driver-fips, gitlab-kas-fips, cfssl-fips, kubeflow-pipelines, redis-operator-fips, oauth2-proxy, cue-fips, pgtimetable, kube-logging-operator-custom-runner-fips, spire-controller-manager, sonobuoy, gitlab-pages-fips, rook-fips,...