GHSA-6CJC-53GC-5RQM vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

GHSA-F9XW-JH8M-3MWQ vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

CVE-2026-111755 vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

CVE-2026-111756 vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

GHSA-Q3JH-WRC6-JGQ8 vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

GHSA-8R9P-F939-6H3C vulnerabilities

Vulnerabilities for packages: code-server, homepage, configurable-http-proxy, azurite, opensearch-dashboards, commercial-gitlab-rails-ee-fips, kubeflow-pipelines, gitlab-rails-ce, lambda-nodejs, unleash-fips, unleash, lerna, langfuse, wazuh-dashboard-fips, nextcloud-server, kibana, prism,...

CVE-2026-111750 vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

GHSA-GX76-C99X-2C96 vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

CVE-2026-111748 vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

CVE-2026-111749 vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

GHSA-9XW5-W5JJ-PVCG vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

GHSA-PQXQ-W44R-73XW vulnerabilities

Vulnerabilities for packages: kserve, py3.13-scanner-test-libraries-aiohttp, litellm-fips, commercial-gitlab-cng-ee, metaflow-service, commercial-gitlab-cng-ee-fips...

Scalar-Venom-Attack

This paper analyzes cryptographic vulnerabilities discovered in modern cryptographic key management infrastructure, with a particular focus on critical flaws in the architecture of hardware security modules HSMs when handling elliptic curve private keys. The study focuses on a class of attacks th...

CVE-2026-61845 vulnerabilities

Vulnerabilities for packages: pghero, pghero-fips...

GHSA-6WMF-3R64-VCWV vulnerabilities

Vulnerabilities for packages: pghero, pghero-fips...

CVE-2020-3996 vulnerabilities

Vulnerabilities for packages: velero-plugin-for-alicloud, velero-plugin-for-alicloud-fips...

CLEANSTART-2026-EH67735 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

Security vulnerability affects the coredns-fips package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption...

GO-2026-6770 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

GO-2026-6700 vulnerabilities

Vulnerabilities for packages: argo-events, krakend, trufflehog, bento, dapr, keda, keda-fips, falcosidekick, guac, bento-fips, argo-events-fips, falcosidekick-fips, trufflehog-fips, dapr-fips, krakend-fips, telegraf...

CVE-2026-74048

A flaw was found in Apache Tomcat. When the server is configured to enforce FIPS Federal Information Processing Standards mode, a failure during FIPS activation causes Tomcat to log an error and continue running with standard non-FIPS cryptographic providers instead of terminating securely. This...