5611 matches found
CVE-2026-40924 vulnerabilities
Vulnerabilities for packages: tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips, tkn...
CVE-2026-40938 vulnerabilities
Vulnerabilities for packages: tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips, tkn...
GHSA-RX35-6RHX-7858 vulnerabilities
Vulnerabilities for packages: tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips, tkn...
GHSA-MF9W-MJ56-HR94 vulnerabilities
Vulnerabilities for packages: kserve, authentik-fips, superset, keep, keep-fips, litellm, ggshield, localstack, authentik...
CVE-2026-28684 vulnerabilities
Vulnerabilities for packages: kserve, authentik-fips, superset, keep, keep-fips, litellm, ggshield, localstack, authentik...
CLEANSTART-2026-AL68245 filippo
Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...
CVE-2026-5588
A flaw was found in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix. The PKIX draft CompositeVerifier implementation improperly accepts an empty signature sequence as a valid cryptographic signature. This issue allows a remote attacker to bypass signature verification mechanisms, potentially...
CVE-2026-6383 vulnerabilities
Vulnerabilities for packages: virt-api, virt-handler, virt-controller-fips, virt-operator-fips, virt-launcher, virt-operator, virt-handler-fips, virt-api-fips, virt-controller...
GHSA-J6CV-3W8P-VRG8 vulnerabilities
Vulnerabilities for packages: virt-api, virt-handler, virt-controller-fips, virt-operator-fips, virt-launcher, virt-operator, virt-handler-fips, virt-api-fips, virt-controller...
CVE-2026-21724 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-9VQ6-R4XH-VM55 vulnerabilities
Vulnerabilities for packages: grafana-fips...
CVE-2026-33375 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-7G92-G4VH-HP84 vulnerabilities
Vulnerabilities for packages: grafana-fips...
GHSA-V92G-XGXW-VVMM vulnerabilities
Vulnerabilities for packages: jupyter-base-notebook, pgadmin4-fips, airflow-core, open-webui, prefect-fips, airflow, superset, mlflow, dagster, dagster-fips, nemo...
GHSA-497X-RRR9-68JP vulnerabilities
Vulnerabilities for packages: grafana-alloy, commercial-grafana, grafana, grafana-alloy-fips, grafana-fips...
CVE-2026-21726 vulnerabilities
Vulnerabilities for packages: grafana-alloy, commercial-grafana, grafana, grafana-alloy-fips, grafana-fips...
Enclawed: A Configurable, Sector-Neutral Hardening Framework for Single-User AI Assistant Gateways
We present enclawed, a hard-fork hardening framework built on top of the OpenClaw single-user personal artificial intelligence AI assistant gateway. enclawed targets deployments that need attestable peer trust, deny-by-default external connectivity, signed-module loading, and a tamper-evident aud...
GHSA-WG6Q-6289-32HP vulnerabilities
Vulnerabilities for packages: hono, logstash-fips, sonarqube, commercial-elasticsearch, jruby, pinot, keycloak, camunda, thingsboard, kayenta, apache-nifi-registry, wso2is, kserve-modelmesh, kayenta-fips, zipkin, camunda-zeebe, ghidra, guacamole-client, hadoop-fips, logstash, apache-pulsar,...