7906 matches found
CVE-2026-74048
A flaw was found in Apache Tomcat. When the server is configured to enforce FIPS Federal Information Processing Standards mode, a failure during FIPS activation causes Tomcat to log an error and continue running with standard non-FIPS cryptographic providers instead of terminating securely. This...
CVE-2026-87795 vulnerabilities
Vulnerabilities for packages: cassandra-fips, cassandra...
GHSA-VC57-7FRC-7VQX vulnerabilities
Vulnerabilities for packages: cassandra-fips, cassandra...
CVE-2026-74048
Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...
CVE-2026-74048
Apache Tomcat contains a Not Failing Securely ('Failing Open') vulnerability where the OpenSSLLifecycleListener fails to prevent start-up if FIPS activation fails. When configured for FIPS mode but activation fails, the software logs an error but continues to operate using JSSE in non-FIPS mode ....
CVE-2026-74048 Apache Tomcat: OpenSSL-FFM FIPS failure does not prevent start-up
Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...
EUVD-2026-105004
Not Failing Securely 'Failing Open' vulnerability in Apache Tomcat. If the OpenSSLLifecycleListener is configured to use FIPS mode but FIPS activation fails, Tomcat logs and error but continues to use JSSE in non-FIPS mode with the provided configuration. This issue affects Apache Tomcat: from...
wolfssl
wolfSSL Embedded SSL/TLS Library The wolfSSL embedded SSL library formerly CyaSSL is a lightweight SSL/TLS library written in ANSI C and targeted for embedded, RTOS, and resource-constrained environments - primarily because of its small size, speed, and feature set. It is commonly used in standar...
CLEANSTART-2026-XD72038 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-ZK51382 norm
Security vulnerability affects the gatekeeper-fips package. A norm...
CLEANSTART-2026-WY78663 On Linux, if the target of Root
Security vulnerability affects the grafana-fips package. On Linux, if the target of Root...
SymCrypt-OpenSSL
SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...
openSUSE 16: libopenssl-3-devel / libopenssl-3-fips-provider / etc (openSUSE-SU-2026:22102-1)
The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:22102-1 advisory. - CVE-2026-35189: Excessive Memory Allocation in Relative CRLDP Processing bsc1280589. - CVE-2026-35191: QUIC Unvalidated Amplification Credit m...
CVE-2026-100349 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-opensearchserverless-fips, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-route53recoveryreadiness-fips, crossplane-provider-aws-route53resolver, crossplane-provider-aws-lakeformation-fips,...
GHSA-74VM-87HJ-R66F vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-opensearchserverless-fips, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-route53recoveryreadiness-fips, crossplane-provider-aws-route53resolver, crossplane-provider-aws-lakeformation-fips,...
CVE-2026-102941 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter-fips, temporal-fips, snyk-cli, temporal, temporal-ui-server-fips, kube-metrics-adapter, temporal-ui-server, coder, coder-fips, fq...
GHSA-CV23-7VC5-JFH7 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter-fips, temporal-fips, snyk-cli, temporal, temporal-ui-server-fips, kube-metrics-adapter, temporal-ui-server, coder, coder-fips, fq...
GHSA-685W-Q87J-WQW3 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...