GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.1-fips, litellm, datadog-agent, openstack-keystone-2025.1-fips, openstack-placement-2025.2, openstack-glance-2025.1, openstack-placement-2025.2-fips, openstack-placement-2025.1, superset-fips, metaflow-service-fips, openstack-placement-2026.1,...

CVE-2026-5446

In wolfSSL, ARIA-GCM cipher suites used in TLS 1.2 and DTLS 1.2 reuse an identical 12-byte GCM nonce for every application-data record. Because wcAriaEncrypt is stateless and passes the caller-supplied IV verbatim to the MagicCrypto SDK with no internal counter, and because the explicit IV is...

CVE-2025-61727 vulnerabilities

Vulnerabilities for packages: supercronic, karma-fips, aws-nuke-fips, newrelic-infrastructure-agent, kube-logging-operator-custom-runner-fips, argo-cd-fips, traefik-fips, tigera-operator-fips, polaris-fips, nri-rabbitmq, metrics-agent, spire-server-fips, sftpgo-plugin-eventsearch, wave-fips,...