GHSA-H3X4-894J-XPX5 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta, nacos, ontop, thingsboard, ontop-fips, camunda-zeebe, conductor, camunda, nacos-docker, conductor-fips...

CVE-2026-68525 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta, nacos, ontop, thingsboard, ontop-fips, camunda-zeebe, conductor, camunda, nacos-docker, conductor-fips...

GHSA-GCX9-497G-6CP6 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta, nacos, ontop, thingsboard, ontop-fips, camunda-zeebe, conductor, camunda, nacos-docker, conductor-fips...

CVE-2026-79921 vulnerabilities

Vulnerabilities for packages: dapr-fips, sftpgo-plugin-pubsub, opentelemetry-collector-contrib-fips, versitygw-fips, telegraf, guac, trufflehog, trufflehog-fips, argo-events, keda, argo-events-fips, minio, keda-fips, bento, versitygw, nuclio-controller-fips, bento-fips, minio-fips,...

CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: kayenta-fips, kayenta, nacos, ontop, thingsboard, ontop-fips, camunda-zeebe, conductor, camunda, nacos-docker, conductor-fips...

CLEANSTART-2026-QE70350 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the tekton-chains-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CVE-2026-84371 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, tensorflow-gpu-jupyter...

GHSA-G8QQ-57P8-GGW5 vulnerabilities

Vulnerabilities for packages: unleash, unleash-fips, tensorflow-gpu-jupyter...

GHSA-2M8G-3CMR-WG3W vulnerabilities

Vulnerabilities for packages: authentik, netbox, awx, authentik-fips, netbox-fips...

CVE-2026-73229 vulnerabilities

Vulnerabilities for packages: authentik, netbox, awx, authentik-fips, netbox-fips...

CVE-2026-73228 vulnerabilities

Vulnerabilities for packages: authentik, netbox, awx, authentik-fips, netbox-fips...

GHSA-G47C-3XMW-Q6M2 vulnerabilities

Vulnerabilities for packages: authentik, netbox, awx, authentik-fips, netbox-fips...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: kibana, gitlab-rails-ce, vitess, langfuse, keep-fips, unleash-fips, langfuse-fips, opensearch-dashboards-fips, prism, wazuh-dashboard-fips, nextcloud-server, unleash-proxy, keep, yaml-language-server, tensorflow-gpu-jupyter, tileserver-gl, tileserver-gl-fips, unleash...

GO-2026-6325 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

GHSA-73WF-GQ98-2V4G vulnerabilities

Vulnerabilities for packages: arangodb, authentik, gitlab-rails-ce, vitess, langfuse-fips, langfuse, tensorflow-gpu-jupyter, ts-patch, wazuh-dashboard-fips, authentik-fips, gitlab-rails-ce-fips, nextcloud-server, wazuh-dashboard...

CVE-2026-73088 vulnerabilities

Vulnerabilities for packages: arangodb, authentik, gitlab-rails-ce, vitess, langfuse-fips, langfuse, tensorflow-gpu-jupyter, ts-patch, wazuh-dashboard-fips, authentik-fips, gitlab-rails-ce-fips, nextcloud-server, wazuh-dashboard...

CVE-2026-73089 vulnerabilities

Vulnerabilities for packages: arangodb, authentik, gitlab-rails-ce, vitess, langfuse-fips, langfuse, tensorflow-gpu-jupyter, ts-patch, wazuh-dashboard-fips, authentik-fips, gitlab-rails-ce-fips, nextcloud-server, wazuh-dashboard...

GHSA-C83G-RGW3-J3CX vulnerabilities

Vulnerabilities for packages: arangodb, authentik, gitlab-rails-ce, vitess, langfuse-fips, langfuse, tensorflow-gpu-jupyter, ts-patch, wazuh-dashboard-fips, authentik-fips, gitlab-rails-ce-fips, nextcloud-server, wazuh-dashboard...

CVE-2026-75899 vulnerabilities

Vulnerabilities for packages: kibana, vitess, langfuse, keep-fips, unleash-fips, langfuse-fips, opensearch-dashboards-fips, prism, wazuh-dashboard-fips, nextcloud-server, unleash-proxy, keep, yaml-language-server, tensorflow-gpu-jupyter, tileserver-gl, tileserver-gl-fips, unleash,...