CVE-2026-33504 vulnerabilities

Vulnerabilities for packages: hydra, hydra-fips...

GHSA-R9W3-57W2-GCH2 vulnerabilities

Vulnerabilities for packages: hydra, hydra-fips...

NewStart CGSL MAIN 7.02 : openssl Vulnerability (NS-SA-2026-0038)

The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by a vulnerability: - Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This...

GHSA-JQCQ-XJH3-6G23 vulnerabilities

Vulnerabilities for packages: grafana-alloy, bento-fips, grafana-alloy-fips, splunk-otel-collector, steampipe, bento, kots, splunk-otel-collector-fips, teleport, telegraf...

GHSA-X6GF-MPR2-68H6 vulnerabilities

Vulnerabilities for packages: ory-kratos, hydra-fips, hydra, bento, trillian-fips, harbor, teleport, argo-workflows-fips, harbor-fips, gotrue-fips, ory-kratos-fips, grafana-alloy, bento-fips, argo-workflows, vault, splunk-otel-collector, teleport-operator-fips, steampipe, vault-fips, migrate, kot...

CVE-2026-4427 vulnerabilities

Vulnerabilities for packages: ory-kratos, hydra-fips, hydra, bento, trillian-fips, harbor, teleport, argo-workflows-fips, harbor-fips, gotrue-fips, ory-kratos-fips, grafana-alloy, bento-fips, argo-workflows, vault, splunk-otel-collector, teleport-operator-fips, steampipe, vault-fips, migrate, kot...

OESA-2026-1752 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: keycloak, tinkerpop, zipkin, infinispan, hono, camunda-zeebe, druid, spark, pinot-fips, logstash, management-api-for-apache-cassandra-4.0, kayenta, knative-kafka-broker-fips, opensearch, keycloak-fips, kserve-modelmesh, opensearch-fips, elasticsearch-fips, kafbat-ui,...

CVE-2026-33726 vulnerabilities

Vulnerabilities for packages: kubescape-operator, hubble-ui-backend-fips, hubble-fips, hubble, kubescape-server-fips, kubescape, kubescape-server, kubescape-operator-fips, hubble-ui...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: keycloak, tinkerpop, zipkin, infinispan, hono, camunda-zeebe, druid, spark, pinot-fips, logstash, management-api-for-apache-cassandra-4.0, kayenta, knative-kafka-broker-fips, opensearch, keycloak-fips, kserve-modelmesh, opensearch-fips, elasticsearch-fips, kafbat-ui,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: skaffold, zot, podman-fips, skaffold-fips, kubescape, trivy-fips, kaniko, conftest-fips, cloudbeat-fips, kubescape-server-fips, podman, trivy-operator, docker-compose-fips, livekit-cli, osv-scanner, docker-cli-buildx, docker-cli-buildx-fips, trivy, cloudbeat,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: skaffold, zot, podman-fips, skaffold-fips, kubescape, trivy-fips, kaniko, conftest-fips, cloudbeat-fips, kubescape-server-fips, podman, trivy-operator, docker-compose-fips, livekit-cli, osv-scanner, docker-cli-buildx, docker-cli-buildx-fips, trivy, cloudbeat,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: skaffold, zot, podman-fips, skaffold-fips, kubescape, trivy-fips, kaniko, conftest-fips, cloudbeat-fips, kubescape-server-fips, podman, trivy-operator, docker-compose-fips, livekit-cli, osv-scanner, docker-cli-buildx, docker-cli-buildx-fips, trivy, cloudbeat,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: skaffold, zot, podman-fips, skaffold-fips, kubescape, trivy-fips, kaniko, conftest-fips, cloudbeat-fips, kubescape-server-fips, podman, trivy-operator, docker-compose-fips, livekit-cli, osv-scanner, docker-cli-buildx, docker-cli-buildx-fips, trivy, cloudbeat,...

GHSA-4773-3JFM-QMX3 vulnerabilities

Vulnerabilities for packages: nacos, conductor, kafbat-ui, kayenta-fips, conductor-fips, apache-activemq, camunda, apache-activemq-fips, camunda-zeebe, thingsboard, kayenta, nacos-docker, kafbat-ui-fips, apache-nifi-registry...

CVE-2026-22737 vulnerabilities

Vulnerabilities for packages: nacos, conductor, kafbat-ui, kayenta-fips, conductor-fips, apache-activemq, camunda, apache-activemq-fips, camunda-zeebe, thingsboard, kayenta, nacos-docker, kafbat-ui-fips, apache-nifi-registry...

GHSA-6HCQ-HMM3-JJ3C vulnerabilities

Vulnerabilities for packages: nacos, conductor, kafbat-ui, kayenta-fips, conductor-fips, apache-activemq, camunda, apache-activemq-fips, camunda-zeebe, thingsboard, kayenta, nacos-docker, kafbat-ui-fips, apache-nifi-registry...

pqc-combo (0.1.0), pqc-fips (0.0.3) +1 more potentially affected by unknown CVE via libcrux-ml-dsa (0.0.4)

libcrux-ml-dsa CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-ml-dsa and may be impacted: - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-CP57-FQ8G-QH6V...

GHSA-CP57-FQ8G-QH6V libcrux has an Incorrect Check of Signer Response Norm During Verification

The ML-DSA verification algorithm as specified in FIPS 204, subsection 6.3 requires verifiers to check that the infinity norm of the deserialized signer response $z$ does not exceed $\gamma1 - \beta$ line 13 of Algorithm 8. The same check is required to be performed during signature generation...

pqc-combo (0.1.0), pqc-fips (0.0.3) +1 more potentially affected by unknown CVE via libcrux-ml-dsa (0.0.4)

libcrux-ml-dsa CARGO version 0.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on libcrux-ml-dsa and may be impacted: - pqc-combo 0.1.0 - pqc-fips 0.0.3 - pqc-nostd 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-XRF2-5R3P-5WGJ...