GHSA-8396-JFFM-QX4W vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana, commercial-grafana...

CVE-2026-48096 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana, commercial-grafana...

OESA-2026-2620 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may resul...

GHSA-CXH2-4639-VMC5 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GHSA-J5F8-GRM9-P9FC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, kubeflow-katib, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, awx, opensearch-dashboards...

CVE-2026-44486 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, nextcloud-server, kubeflow-katib, wazuh-dashboard-fips, wazuh-dashboard, opensearch-dashboards-fips, gitlab-rails-ce, awx, opensearch-dashboards...

CVE-2026-33812 vulnerabilities

Vulnerabilities for packages: mattermost-fips, mattermost...

GHSA-866G-F22W-33X8 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-8769 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

GHSA-C4FP-CXRR-MJ66 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.3-rails, ruby3.4-rails, kube-logging-operator, ruby3.2-rails, ruby4.0-rails, logstash-fips, logstash, gitlab-rails-ce, truffleruby, kube-fluentd-operator...

GHSA-8P34-64R3-MWG8 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.3-rails, ruby3.4-rails, kube-logging-operator, ruby3.2-rails, ruby4.0-rails, logstash-fips, logstash, gitlab-rails-ce, truffleruby, kube-fluentd-operator...

GHSA-46Q3-7GV7-QMGG vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.3-rails, ruby3.4-rails, kube-logging-operator, ruby3.2-rails, ruby4.0-rails, logstash-fips, logstash, gitlab-rails-ce, truffleruby, kube-fluentd-operator...

CVE-2026-47241 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, ruby3.3-rails, ruby3.4-rails, kube-logging-operator, ruby3.2-rails, ruby4.0-rails, logstash-fips, logstash, gitlab-rails-ce, truffleruby, kube-fluentd-operator...

CVE-2026-47736 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-cng, logstash-fips, logstash, gitlab-rails-ce...

GHSA-QPGP-93VX-G8V8 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-cng, logstash-fips, logstash, gitlab-rails-ce...

CVE-2026-47737 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-cng, logstash-fips, logstash, gitlab-rails-ce...

Linux Distros Unpatched Vulnerability : CVE-2026-42764

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: Receiving a QUIC initial packet with an invalid token may trigger a NULL pointer dereference in the OpenSSL QUIC server with address validation...

Linux Distros Unpatched Vulnerability : CVE-2026-42770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: ...

EUVD-2026-35474

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

EUVD-2026-35484

Issue summary: An attacker-controlled CMP Certificate Management Protocol server could trigger a NULL pointer dereference in a CMP client application. Impact summary: A NULL pointer dereference causes a crash of the application and a Denial of Service. An attacker controlling a CMP server or acti...