GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-keystone-2025.1, netbox, superset-fips, openstack-glance-2026.1, datadog-agent-fips, openstack-horizon-2025.1, airflow-postgres-fips, openstack-keystone-2026.1-fips, wazuh-manager, openstack-glance-2026.1-fips,...

CVE-2026-5446

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wcAriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: polaris-fips, secrets-store-csi-driver-provider-aws-fips, git-sync-fips, keda-fips, temporal, kserve-rest-proxy, gitea, node-feature-discovery-fips, opa, terraform, slsa-verifier, grpc-health-probe, falco-exporter-fips, ko-fips, osv-scanner,...