GHSA-RGRR-P7GP-5XJ7 vulnerabilities

Vulnerabilities for packages: pinot-fips, thingsboard, celeborn, trino, management-api-for-apache-cassandra-4.1, apache-hop-fips, apache-hop, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, pinot, seata, druid, tez...

com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321 <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321 <=5.0.4-1329) +176 more potentially affected by CVE-2026-8149 via org.bouncycastle:bc-fips (>=2.1.0 <=2.1.2)

org.bouncycastle:bc-fips MAVEN version =2.1.0, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.3-828 - com.itextpdf:bouncy-castle-fips-adapter =9.6.0 - com.sap.cloud.ans:clm-sl-alert-notification-client =1.13.0 - io.nats.nkeys:fips-jdk17...

com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321 <=5.0.4-1329), com.github.cafaudit:caf-audit-monkey-container (>=5.0.3-1321 <=5.0.4-1329) +80 more potentially affected by CVE-2026-8149 via org.bouncycastle:bc-fips (>=2.1.0 <=2.1.1)

org.bouncycastle:bc-fips MAVEN version =2.1.0, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.0, =4.10.2 and more Source cves: CVE-2026-8149 Source advisory:...

GHSA-RPMF-866Q-6P89 vulnerabilities

Vulnerabilities for packages: code-server, langfuse, langfuse-fips, kibana...

CVE-2026-44240 vulnerabilities

Vulnerabilities for packages: code-server, langfuse, langfuse-fips, kibana...

GHSA-PP6C-GR5W-3C5G vulnerabilities

Vulnerabilities for packages: reflex, wazuh-manager-fips, airflow, airflow-core, wazuh-manager, keep-fips, keep, litellm, semgrep, lmcache-cuda-12.8, synapse...

CVE-2026-44307 vulnerabilities

Vulnerabilities for packages: reflex, airflow, airflow-core, pgadmin4, keep-fips, keep, mlflow-fips, pgadmin4-fips...

CVE-2026-42561 vulnerabilities

Vulnerabilities for packages: reflex, wazuh-manager-fips, airflow, airflow-core, wazuh-manager, keep-fips, keep, litellm, semgrep, lmcache-cuda-12.8, synapse...

GHSA-2H4P-VJRC-8XPQ vulnerabilities

Vulnerabilities for packages: reflex, airflow, airflow-core, pgadmin4, keep-fips, keep, mlflow-fips, pgadmin4-fips...

CVE-2026-8149

A vulnerability in Legion of the Bouncy Castle Inc. BC-LTS bcprov-lts8on on X8664, AVX, AVX-512f, Linux, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on Linux, X8664, AVX, AVX-512f. This vulnerability is associated with program files gcm128w, gcm512w, gcm128w.C, gcm512w.C. This issue affects...

CVE-2026-42585 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

CVE-2026-42584 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

GHSA-M4CV-J2PX-7723 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

GHSA-57RV-R2G8-2CJ3 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

CVE-2026-42580 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

GHSA-38F8-5428-X5CV vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

CVE-2026-42581 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, docker-selenium, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fip...

PT-2026-38678

Name of the Vulnerable Software and Affected Versions BC-FJA versions 2.1.0 through 2.1.2 Description A cryptographic issue exists in BC-FIPS on Linux, X86 64, AVX, and AVX-512f architectures. This issue is associated with the program files "gcm128w" and "gcm512w". Recommendations At the moment,...

CVE-2026-42579 vulnerabilities

Vulnerabilities for packages: keycloak-fips, commercial-elasticsearch, opensearch-fips, strimzi-kafka-operator-fips, infinispan, management-api-for-apache-cassandra-4.1, apicurio-registry, apicurio-registry-fips, apache-pulsar, kafbat-ui, kafbat-ui-fips, knative-kafka-broker-fips, spark, druid,...

GHSA-WF45-Q9CH-Q8GH vulnerabilities

Vulnerabilities for packages: plutono, vault, splunk-otel-collector, datadog-agent-fips, nri-cassandra, nri-jmx-fips, bento-fips, seaweedfs-fips, bento, jitsucom-bulker, opentelemetry-collector-contrib-fips, aws-otel-collector-fips, grafana, commercial-grafana, apm-server-fips, elastic-agent,...