CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, apache-beam-python-3.12-sdk, lmcache-cuda-12.8, openstack-keystone-2025.1, openstack-horizon-2025.2, openstack-placement-2025.2, openstack-nova-2025.1, apache-beam-python-3.11-sdk, prefect, ansible-operator-fips, openstack-glance-2025.2, opa...

CVE-2026-14341 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

GHSA-45H8-QRQH-XR5V vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

GHSA-6FHJ-CGMM-XFX6 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

CVE-2026-6267 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

CVE-2025-14562 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

GHSA-86R3-Q889-HVG2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

GHSA-G9G2-QC64-JGCJ vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

CVE-2026-3093 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

CVE-2026-6336 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

GHSA-94P8-87FF-W336 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

GHSA-2RC9-8CX9-FXPR vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

CVE-2026-4672 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

CVE-2026-14351 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner, gitlab-cng-fips, gitlab-runner-fips, gitlab-workhorse-ce, gitlab-workhorse-ce-fips, gitlab-rails-ce, gitlab-cng...

JLSEC-2026-1155 Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in...

Issue summary: A signed integer overflow when sizing the destination buffer for Unicode output in ASN1mbstringncopy can lead to a heap buffer overflow. Impact summary: A heap buffer overflow may lead to a crash or possibly attacker controlled code execution or other undefined behaviour. In...

JLSEC-2026-1142 Issue summary: When EVP_PKEY_derive_set_peer() is called with a DHX (X9.42) peer key, the peer...

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

JLSEC-2026-1138 Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer...

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via AbstractX500NameStyle, which escapes each special character with vBuf.insertindex, "\" on the same...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity in the IETFUtils.valueToString method, reached through X500Name.toString, equals, and hashCode via AbstractX500NameStyle, which escapes each special character with vBuf.insertindex, "\" on the same...

Improper Certificate Validation

Overview Affected versions of this package are vulnerable to Improper Certificate Validation in the check method of ProvOcspRevocationChecker, which verifies a stapled OCSP response's signature and then treats the certificate as unrevoked when no SingleResponse entry matches its CertID, without...