GHSA-X8PR-QX2M-CR7G vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2025-12571 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2025-12734 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2025-9642 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

GHSA-2JWX-73FX-PWRV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

GHSA-39M5-RG2V-54H9 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

GHSA-9396-6M54-W269 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

GHSA-X45W-X744-4HJ7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

GHSA-2V4G-65GF-W58F vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-workhorse-ce...

CVE-2025-11065 vulnerabilities

Vulnerabilities for packages: kyverno, grafana-fips, gitlab-cng-fips, docker-compose-fips, neuvector-sigstore-interface-fips, boring-registry-fips, k9s-fips, ratify-fips, tkn-fips, gitlab-cng, beats-fips, istio-fips, zitadel, beats, rancher-security-scan, mattermost-fips, bank-vaults, pluto-fips,...

GHSA-4XH5-JCJ2-CH8Q vulnerabilities

Vulnerabilities for packages: flux-operator, flux-operator-fips...

CVE-2026-23990 vulnerabilities

Vulnerabilities for packages: flux-operator, flux-operator-fips...

GHSA-2C64-VMV2-HGFC vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2025-64751 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana...

CVE-2026-24686 vulnerabilities

Vulnerabilities for packages: goreleaser, falcoctl, tekton-chains, kyverno-policy-reporter-plugins-kyverno, spire-server-fips, spire-server, tflint-fips, docker, witness, zarf, kyverno, cosign, sigstore-scaffolding, falcoctl-fips, neuvector-sigstore-interface-fips, trivy, buildkitd-fips,...

GHSA-JQC5-W2XX-5VQ4 vulnerabilities

Vulnerabilities for packages: goreleaser, falcoctl, tekton-chains, kyverno-policy-reporter-plugins-kyverno, spire-server-fips, spire-server, tflint-fips, docker, witness, zarf, kyverno, cosign, sigstore-scaffolding, falcoctl-fips, neuvector-sigstore-interface-fips, trivy, buildkitd-fips,...

EUVD-2026-4910

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...

CVE-2026-24850 ML-DSA Signature Verification Accepts Signatures with Repeated Hint Indices

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...

PT-2026-5048

The ML-DSA crate is a Rust implementation of the Module-Lattice-Based Digital Signature Standard ML-DSA. Starting in version 0.0.4 and prior to version 0.1.0-rc.4, the ML-DSA signature verification implementation in the RustCrypto ml-dsa crate incorrectly accepts signatures with repeated duplicat...

openssl security update

3.5.1-7.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.1-7 - Fix CVE-2025-11187 CVE-2025-15467 CVE-2025-15468 CVE-2025-15469 CVE-2025-66199 CVE-2025-68160 CVE-2025-69418 CVE-2025-69419 CVE-2025-69420 CVE-2025-69421 CVE-2026-22795 CVE-2026-227...