CVE-2026-42284 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, opal, mlflow-fips, checkov, datahub-ingestion-fips, awx...

CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: deno, sqlx, sccache, sentry-cli, typst, rpm-sequoia, sdp-k8s-injector, rustup, valkey-ldap, guestproxyagent, ztunnel-fips, komodo, vector, rustls-openssl-client, bootc...

CVE-2026-41205 vulnerabilities

Vulnerabilities for packages: open-webui, superset, airflow, airflow-core, jupyter-base-notebook, mlflow, dagster-fips, dagster, nemo, pgadmin4-fips, prefect-fips...

CVE-2026-41425 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow, datahub-ingestion, pgadmin4-fips, datahub-ingestion-fips...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: amass, gitaly-fips, spicedb, ory-kratos-fips, keda, rke2-cloud-provider-fips, opentelemetry-collector-contrib-fips, sftpgo-plugin-eventsearch, sftpgo-plugin-eventstore, trillian-fips, caddy, authentik, kubeflow-pipelines, ory-kratos, gitaly, falcosidekick, step-ca,...

CVE-2026-41907 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, opensearch-dashboards-fips, py3-captum, renovate, npm, librechat, langfuse-fips, kibana, saf, sqlpad, code-server, redisinsight, kubeflow-pipelines, jitsucom-jitsu, dbgate-fips, gemini-cli, tensorflow-cpu-jupyter, homepage, kubeflow-centraldashboard,...

CVE-2026-41506 vulnerabilities

Vulnerabilities for packages: kubevela, gitea-fips, skaffold-fips, gitaly-fips, dagger, kubevela-fips, tfsec, crossplane-fips, gitaly, xeol-fips, argocd-image-updater-fips, kargo, teleport, wolfictl, kubescape-server, nuclei, goreleaser, trivy-operator, steampipe, grype-db, kaniko, gomplate,...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: openssl: openssl-3.5.6-0.3.hum1 aarch64, x8664 openssl-config-fips-3.5.6-0.3.hum1 aarch64, x8664 openssl-devel-3.5.6-0.3.hum1 aarch64, x8664 openssl-devel-engine-3.5.6-0.3.hum1 aarch64, x8664...

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of accessibl...

SUSE-SU-2026:1704-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.3+9 April 2026 CPU. Security issues fixed: - CVE-2026-22007: Security: unauthenticated attacker with logon to the infrastructure where java executes can gain unauthorized read access to a subset of...

CVE-2026-21728 vulnerabilities

Vulnerabilities for packages: grafana-fips...

CLSA-2026-1778051357 java-21-openjdk: Fix of 8 CVEs

Update to jdk-21.0.11+10 GA - Resolves Oracle April 2026 CPU CVEs: CVE-2026-22007, CVE-2026-22013, CVE-2026-22016, CVE-2026-22018, CVE-2026-22021, CVE-2026-34268, CVE-2026-34282 - CVE-2026-23865: integer overflow in ttvarloaditemvariationstore in bundled FreeType fixed via bump to 2.14.2 - Update...

CVE-2026-5758 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards, tileserver-gl, tileserver-gl-fips, wazuh-dashboard...

GHSA-J452-XHG8-QG39 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, opensearch-dashboards-fips, opensearch-dashboards, tileserver-gl, tileserver-gl-fips, wazuh-dashboard...

GHSA-RGGM-JJMC-3394 vulnerabilities

Vulnerabilities for packages: kyverno-notation-aws-fips...

GHSA-Q2MW-FVJ9-VVCW vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.4-net-imap, ruby3.4-rails, logstash, jruby, ruby3.3-rails, logstash-fips, ruby4.0-rails, kube-logging-operator, ruby3.2-net-imap, truffleruby, ruby3.3-net-imap, ruby4.0-net-imap, gitlab-rails-ce-fips, kube-fluentd-operator...

GHSA-VCGP-9326-PQCP vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.4-net-imap, ruby3.4-rails, logstash, jruby, ruby3.3-rails, logstash-fips, ruby4.0-rails, kube-logging-operator, ruby3.2-net-imap, truffleruby, ruby3.3-net-imap, ruby4.0-net-imap, gitlab-rails-ce-fips, kube-fluentd-operator...

GHSA-87PF-FPWV-P7M7 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.4-net-imap, ruby3.4-rails, logstash, ruby3.3-rails, logstash-fips, ruby4.0-rails, kube-logging-operator, ruby3.2-net-imap, truffleruby, ruby3.3-net-imap, ruby4.0-net-imap, gitlab-rails-ce-fips...

CVE-2026-42246 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.4-net-imap, ruby3.4-rails, logstash, jruby, ruby3.3-rails, logstash-fips, ruby4.0-rails, kube-logging-operator, ruby3.2-net-imap, truffleruby, ruby3.3-net-imap, ruby4.0-net-imap, gitlab-rails-ce-fips, kube-fluentd-operator...

CVE-2026-42256 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.2-rails, ruby3.4-net-imap, ruby3.4-rails, logstash, ruby3.3-rails, logstash-fips, ruby4.0-rails, kube-logging-operator, ruby3.2-net-imap, truffleruby, ruby3.3-net-imap, ruby4.0-net-imap, gitlab-rails-ce-fips...