GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: consul-fips, kyverno-notation-aws-fips, guac, pulumi-language-dotnet, syft, nemo, crossplane-provider-azure-resources, crossplane-provider-azure-sql, gitlab-rails-ce-fips, crossplane-provider-azure-search, grype, splunk-otel-collector-fips,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: guac, pulumi-language-dotnet, syft, nemo, gitlab-rails-ce-fips, grype, splunk-otel-collector-fips, minio-fips, scorecard, terraform, pulumi-language-java, trivy-operator, trivy-operator-fips, chainloop-cli, cloudbeat-fips, amazon-ssm-agent, apko, argo-cd,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: consul-fips, crossplane-provider-aws-kafka-fips, crossplane-provider-azure-search, grype, terraform, vault-fips, crossplane-provider-aws-cloudwatch, chainloop-cli, argo-cd, crossplane-provider-aws-ecr-fips, tkn-fips, gptscript, crossplane-provider-aws-cognitoidentity...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: consul-fips, kyverno-notation-aws-fips, guac, pulumi-language-dotnet, syft, nemo, crossplane-provider-azure-resources, crossplane-provider-azure-sql, gitlab-rails-ce-fips, crossplane-provider-azure-search, grype, splunk-otel-collector-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: consul-fips, crossplane-provider-aws-kafka-fips, crossplane-provider-azure-search, grype, terraform, vault-fips, crossplane-provider-aws-cloudwatch, chainloop-cli, argo-cd, crossplane-provider-aws-ecr-fips, tkn-fips, gptscript, crossplane-provider-aws-cognitoidentity...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: nemo, gitlab-rails-ce-fips, minio-fips, terraform, trivy-operator, trivy-operator-fips, docker-machine-driver-harvester, cloudbeat-fips, argo-cd, argocd-image-updater-fips, gatekeeper-fips, etcd, frankenphp-8.5, commercial-grafana, opentofu-fips, trivy,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: guac, pulumi-language-dotnet, syft, nemo, gitlab-rails-ce-fips, grype, splunk-otel-collector-fips, minio-fips, scorecard, terraform, pulumi-language-java, trivy-operator, trivy-operator-fips, chainloop-cli, docker-machine-driver-harvester, cloudbeat-fips,...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: pinot, confluent-kafka-jre-bcfips, hadoop-client-modules, kafka-fips, apache-hop-fips, druid, confluent-kafka, kafka, apache-pulsar-fips, spark-kubernetes-operator, spark, pinot-fips, apache-hop, hadoop-fips, apache-nifi, spark-fips, spark-kubernetes-operator-fips,...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: pinot, confluent-kafka-jre-bcfips, hadoop-client-modules, kafka-fips, apache-hop-fips, druid, confluent-kafka, kafka, apache-pulsar-fips, spark-kubernetes-operator, spark, pinot-fips, apache-hop, hadoop-fips, apache-nifi, spark-fips, spark-kubernetes-operator-fips,...

Oracle Linux 9 : dracut (ELSA-2026-26533)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-26533 advisory. 057-115.git20260527.0.1 - Skip the default FIPS logic on special UEK kernels where the FIPS module is linked directly into the kernel. Orabug: 38705580 - Ship...

golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

GHSA-W879-237Q-WC7R golang.org/x/crypto: Invoking pathological RSA/DSA parameters may cause DoS

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-56761 vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard, kibana, librechat, langfuse...

RHSA-2026:28832 Red Hat Security Advisory: openssl-fips-provider security update

Bulletin has no description...

GHSA-RMJ7-2VXQ-3G9F vulnerabilities

Vulnerabilities for packages: airbyte-server-fips, apicurio-registry, kafka-fips, management-api-for-apache-cassandra-4.1, kafka-bridge, kafka, jenkins-plugin-manager, elasticsearch, geoserver, guacamole-client, opensearch-fips, jenkins, request-9047-keycloak-fips, spark-kubernetes-operator-fips,...

CVE-2026-54517 vulnerabilities

Vulnerabilities for packages: pinot, confluent-kafka-jre-bcfips, airbyte-server-fips, apicurio-registry, kafka-fips, apache-tika, strimzi-kafka-operator, apache-hop-fips, management-api-for-apache-cassandra-4.1, nacos-docker, kafbat-ui-fips, strimzi-kafka-operator-fips, cassandra, dependency-trac...

GHSA-HGJ6-7826-R7M5 vulnerabilities

Vulnerabilities for packages: airbyte-server-fips, apicurio-registry, kafka-fips, management-api-for-apache-cassandra-4.1, kafka-bridge, kafka, jenkins-plugin-manager, elasticsearch, geoserver, guacamole-client, opensearch-fips, jenkins, request-9047-keycloak-fips, spark-kubernetes-operator-fips,...

CVE-2026-54518 vulnerabilities

Vulnerabilities for packages: pinot, confluent-kafka-jre-bcfips, airbyte-server-fips, apicurio-registry, kafka-fips, apache-tika, strimzi-kafka-operator, apache-hop-fips, management-api-for-apache-cassandra-4.1, nacos-docker, kafbat-ui-fips, strimzi-kafka-operator-fips, cassandra, dependency-trac...

CVE-2026-54516 vulnerabilities

Vulnerabilities for packages: pinot, confluent-kafka-jre-bcfips, airbyte-server-fips, apicurio-registry, kafka-fips, apache-tika, strimzi-kafka-operator, apache-hop-fips, management-api-for-apache-cassandra-4.1, nacos-docker, kafbat-ui-fips, strimzi-kafka-operator-fips, cassandra, dependency-trac...

GHSA-5HH8-Q8HV-FR38 vulnerabilities

Vulnerabilities for packages: pinot, confluent-kafka-jre-bcfips, airbyte-server-fips, apicurio-registry, kafka-fips, apache-tika, strimzi-kafka-operator, apache-hop-fips, management-api-for-apache-cassandra-4.1, nacos-docker, kafbat-ui-fips, strimzi-kafka-operator-fips, cassandra, dependency-trac...