CVE-2026-42034 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...

CVE-2026-42037 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...

CVE-2026-42041 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...

CVE-2026-42040 vulnerabilities

Vulnerabilities for packages: saf, prism, langfuse-fips, langfuse, kibana, awx, nextcloud-server, wazuh-dashboard, jitsucom-jitsu, gitlab-rails-ce, gitlab-rails-ce-fips, redisinsight, opensearch-dashboards-fips, wazuh-dashboard-fips, lerna, opensearch-dashboards, kubeflow-katib,...

GHSA-Q8QP-CVCW-X6JJ vulnerabilities

Vulnerabilities for packages: saf, jitsucom-jitsu, redisinsight, opensearch-dashboards-fips, librechat, opensearch-dashboards, prism, langfuse, kubeflow-katib, kubeflow-centraldashboard, langfuse-fips, wazuh-dashboard, awx, gitlab-rails-ce-fips, nextcloud-server, kibana, gitlab-rails-ce,...

parley-core (>=0.2.0, <=0.6.1), pqc-combo (0.1.0) +2 more potentially affected by unknown CVE via libcrux-ml-dsa (>=0.0.4, <=0.0.8)

libcrux-ml-dsa CARGO version =0.0.4, =0.2.0, =0.6.1 - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0125...

CVE-2026-41240 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...

CVE-2026-41238 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...

GHSA-H7MW-GPVR-XQ4M vulnerabilities

Vulnerabilities for packages: langfuse-fips, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...

GHSA-V9JR-RG53-9PGP vulnerabilities

Vulnerabilities for packages: langfuse-fips, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...

CVE-2026-41239 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...

GHSA-CRV5-9VWW-Q3G8 vulnerabilities

Vulnerabilities for packages: langfuse-fips, nextcloud-server, wazuh-dashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, opensearch-dashboards...

OPENSUSE-SU-2026:20672-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: - CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

SUSE-SU-2026:21543-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: - CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

RHCOS 4 : OpenShift Container Platform 4.17.1 (RHSA-2024:7925)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:7925 advisory. - Podman: Buildah: cri-o: FIPS Crypto-Policy Directory Mounting Issue in containers/common Go Library CVE-2024-9341 Note that Nessus has not...

OESA-2026-2161 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Applications using RSASVE key encapsulation to establish a secret encryption key can send contents of an uninitialized memory buffer to a malicious...

CLEANSTART-2026-DO31246 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the terragrunt-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-KT28044 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the terragrunt-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CLEANSTART-2026-DN20646 spdystream is a Go library for multiplexing streams over SPDY connections

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...

CLEANSTART-2026-TY63648 CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs

Multiple security vulnerabilities affect the atlantis-fips package. The CombinedMult function in the CIRCL ecc/p384 package secp384r1 curve produces an incorrect value for specific inputs. See references for individual vulnerability details...