4442 matches found
GHSA-W573-9FFJ-6FF9 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, apache-pulsar, thingsboard, apache-nifi, spark-kubernetes-operator-fips, cassandra, kafbat-ui, localstack, tez, pinot-fips, s3proxy-fips, strimzi-kafka-operator-fips, zookeeper-fips, spark-kubernetes-operator, flyway-fips, keycloak, flyway,...
CVE-2026-45536 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, apache-pulsar, thingsboard, apache-nifi, spark-kubernetes-operator-fips, cassandra, kafbat-ui, localstack, tez, pinot-fips, s3proxy-fips, strimzi-kafka-operator-fips, zookeeper-fips, spark-kubernetes-operator, flyway-fips, keycloak, flyway,...
CVE-2026-44249 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, akhq, apache-pulsar, opensearch-fips, thingsboard, apache-nifi, spark-kubernetes-operator-fips, cassandra, kafbat-ui, localstack, tez, pinot-fips, s3proxy-fips, reposilite, strimzi-kafka-operator-fips, zookeeper-fips, spark-kubernetes-operator,...
CVE-2026-45416 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, akhq, apache-pulsar, opensearch-fips, thingsboard, apache-nifi, spark-kubernetes-operator-fips, cassandra, kafbat-ui, localstack, tez, pinot-fips, s3proxy-fips, reposilite, strimzi-kafka-operator-fips, zookeeper-fips, spark-kubernetes-operator,...
GHSA-X4GW-5CX5-PGMH vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, akhq, apache-pulsar, opensearch-fips, thingsboard, apache-nifi, spark-kubernetes-operator-fips, cassandra, kafbat-ui, localstack, tez, pinot-fips, s3proxy-fips, reposilite, strimzi-kafka-operator-fips, zookeeper-fips, spark-kubernetes-operator,...
GHSA-3QP7-7MW8-WX86 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, akhq, apache-pulsar, opensearch-fips, thingsboard, apache-nifi, spark-kubernetes-operator-fips, cassandra, kafbat-ui, localstack, tez, pinot-fips, s3proxy-fips, reposilite, strimzi-kafka-operator-fips, zookeeper-fips, spark-kubernetes-operator,...
GHSA-QP9X-WP8F-QGJJ vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, datadog-agent...
CVE-2026-44250 vulnerabilities
Vulnerabilities for packages: apache-hop, thingsboard, pinot, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, celeborn, tez, pinot-fips, apache-hop-fips, trino, management-api-for-apache-cassandra-5.0, seata...
CVE-2026-44890 vulnerabilities
Vulnerabilities for packages: apache-hop, thingsboard, pinot, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, celeborn, tez, pinot-fips, apache-hop-fips, trino, management-api-for-apache-cassandra-5.0, seata...
GHSA-3244-J874-RHC2 vulnerabilities
Vulnerabilities for packages: apache-hop, thingsboard, pinot, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, celeborn, tez, pinot-fips, apache-hop-fips, trino, management-api-for-apache-cassandra-5.0, seata...
GHSA-6GHJ-FRRJ-JJJ3 vulnerabilities
Vulnerabilities for packages: apache-hop, thingsboard, pinot, management-api-for-apache-cassandra-4.1, management-api-for-apache-cassandra-4.0, celeborn, tez, pinot-fips, apache-hop-fips, trino, management-api-for-apache-cassandra-5.0, seata...
CVE-2026-42770
Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...
PT-2026-47840
Name of the Vulnerable Software and Affected Versions OpenSSL FIPS modules versions 3.0, 3.4, 3.5, 3.6, and 4.0 Description When the EVP PKEY derive set peer function is called with a DHX X9.42 peer key, the software fails to properly verify subgroup membership. Specifically, the check Y^q ≡ 1 mo...
PT-2026-47844
Name of the Vulnerable Software and Affected Versions OpenSSL version 4.0 OpenSSL version 3.6 OpenSSL version 3.5 OpenSSL version 3.4 OpenSSL version 3.0 OpenSSL version 1.1.1 OpenSSL version 1.0.2 Description A use-after-free condition occurs during PKCS7 signature verification when processing a...
PT-2026-47834
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...
PT-2026-47856
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A heap out-of-bounds read can occur during CMS password-based decryption RFC 3211 / PWRI key unwrap when processing attacker-supplied CMS data. The issue arises in the kek unwrap key function...
PT-2026-47836
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur during the decryption of password-encrypted Cryptographic Message Syntax CMS messages. The issue arises because the OpenSSL CMS implementation dereference...
PT-2026-47832
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A remote peer can cause unbounded memory allocation leading to a Denial of Service and abnormal termination of an application acting as a QUIC client or server. This occurs when a malicious...