4442 matches found
PT-2026-42708
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description RSA and DSA public key parsers fail to enforce size limits on key parameters. An unauthenticated client can trigger excessive CPU consumption during signature...
GHSA-JXXR-4GWJ-5JF2 vulnerabilities
Vulnerabilities for packages: ts-patch, prism, authentik-fips, emscripten, tileserver-gl-fips, langfuse, lerna, npm, pulumi, vitess, opensearch-dashboards, opensearch-dashboards-fips, airflow, tileserver-gl, renovate, authentik, langfuse-fips, kibana, actions-runner...
CVE-2026-45740 vulnerabilities
Vulnerabilities for packages: renovate, cadence-web, gemini-cli, langfuse, jitsucom-jitsu, langfuse-fips, kibana, librechat, pulumi, vitess...
GHSA-58QX-3VCG-4XPX vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, arangodb, gemini-cli, kubeflow-katib, wazuh-dashboard-fips, homepage, drupal, redisinsight, py3-jupyterlab, langfuse, gitlab-rails-ce-fips, tensorflow-cpu-jupyter, vitess, opensearch-dashboards, opensearch-dashboards-fips, kubeflow-pipelines,...
CVE-2026-45149 vulnerabilities
Vulnerabilities for packages: ts-patch, prism, authentik-fips, emscripten, tileserver-gl-fips, langfuse, lerna, npm, pulumi, vitess, opensearch-dashboards, opensearch-dashboards-fips, airflow, tileserver-gl, renovate, authentik, langfuse-fips, kibana, actions-runner...
CVE-2026-45736 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, arangodb, gemini-cli, kubeflow-katib, wazuh-dashboard-fips, homepage, drupal, redisinsight, py3-jupyterlab, langfuse, gitlab-rails-ce-fips, tensorflow-cpu-jupyter, vitess, opensearch-dashboards, opensearch-dashboards-fips, kubeflow-pipelines,...
GHSA-JGGG-4JG4-V7C6 vulnerabilities
Vulnerabilities for packages: renovate, cadence-web, gemini-cli, langfuse, jitsucom-jitsu, langfuse-fips, kibana, librechat, pulumi, vitess...
CVE-2026-45738 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, argo-cd...
GHSA-RG3G-4RW9-GQRP vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, argo-cd...
CVE-2026-45737 vulnerabilities
Vulnerabilities for packages: argocd-image-updater-fips, argocd-image-updater, argo-cd...
CVE-2026-45570 vulnerabilities
Vulnerabilities for packages: kubevela-fips, packer-fips, coder, argo-cd-fips, crossplane, kargo, kubescape-server-fips, external-secrets-operator, pulumi-language-yaml, grype, gitlab-runner, gitea-fips, terragrunt-fips, scorecard, kyverno-fips, witness, apko, flux-fips,...
GHSA-CRHJ-59GH-8X96 vulnerabilities
Vulnerabilities for packages: kubevela-fips, packer-fips, coder, argo-cd-fips, crossplane, kargo, kubescape-server-fips, external-secrets-operator, pulumi-language-yaml, grype, gitlab-runner, gitea-fips, terragrunt-fips, scorecard, kyverno-fips, witness, apko, flux-fips,...
CVE-2026-45571 vulnerabilities
Vulnerabilities for packages: kubevela-fips, packer-fips, coder, argo-cd-fips, crossplane, kargo, kubescape-server-fips, external-secrets-operator, pulumi-language-yaml, grype, gitlab-runner, gitea-fips, terragrunt-fips, scorecard, kyverno-fips, witness, apko, flux-fips,...
GHSA-M7CR-M3PV-HGRP vulnerabilities
Vulnerabilities for packages: kubevela-fips, packer-fips, coder, argo-cd-fips, crossplane, kargo, kubescape-server-fips, external-secrets-operator, pulumi-language-yaml, grype, gitlab-runner, gitea-fips, terragrunt-fips, scorecard, kyverno-fips, witness, apko, flux-fips,...
Astra Linux – Vulnerability in OpenSSL
Issue summary: Generating excessively long X9.42 DH keys or checking overly long X9.42 DH keys or parameters can be very slow. Applications that use functions like DHgeneratekey to generate an X9.42 DH key may experience prolonged delays. Similarly, applications that use functions like...
Astra Linux – Vulnerability in OpenSSL
Issue summary: There is a type confusion vulnerability in the signature verification of signed PKCS7 data. In this vulnerability, an ASN1TYPE union member is accessed without first validating the type, resulting in an invalid or NULL pointer dereferencing during the processing of malformed PKCS7...
CLEANSTART-2026-TD94714 Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.7.0-r0
Multiple security vulnerabilities affect the yunikorn-web-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MX56097 Security fixes for CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, ghsa-p77j-4mvh-x3m3, ghsa-vvgc-356p-c3xw applied in versions: 1.7.0-r0, 1.7.0-r1
Multiple security vulnerabilities affect the yunikorn-k8shim-fips package. These issues are resolved in later releases. See references for individual vulnerability details...