SymCrypt-OpenSSL

SCOSSL - The SymCrypt engine and provider for OpenSSL The SymCrypt engine and provider for OpenSSL SCOSSL allow the use of OpenSSL with SymCrypt as the provider for core cryptographic operations. The primary motivation for this is to support FIPS certification, as vanilla OpenSSL 1.1.1 does not...

wolfGuard

WolfGuard VPN with FIPS 140-3 cryptography WolfGuard is the wolfSSL FIPS-compliant refactor of Linux kernel-based WireGuard, originally designed and authored by Jason Donenfeld. Usage is essentially identical. There are two principal components to WolfGuard, the wolfguard.ko kernel module and the...

wolfssl

wolfSSL 임베디드 SSL/TLS 라이브러리 wolfSSL 임베디드 SSL 라이브러리이전 명칭 CyaSSL는 ANSI C로 작성된 경량 SSL/TLS 라이브러리로, 주로 임베디드, RTOS 및 리소스가 제한된 환경을 대상으로 합니다. 이는 작은 크기, 속도 및 기능 세트 때문입니다. 또한 로열티 없는 가격 정책과 뛰어난 크로스 플랫폼 지원 덕분에 표준 운영 환경에서도 흔히 사용됩니다. wolfSSL은 현재 TLS 1.3 및 DTLS 1.3에 이르는 업계 표준을 지원하며, OpenSSL보다 최대 20배 작고, ChaCha20...

GHSA-3WCJ-GJVF-FVCH vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, kibana, langfuse, opensearch-dashboards-fips, langfuse-fips...

CVE-2026-56763 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, librechat, kibana, langfuse, opensearch-dashboards-fips, langfuse-fips...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: gitness, tkn-fips, gogatekeeper, dapr-fips, caddy-fips, step-ca, step-ca-fips, step-fips, telegraf, step-issuer-fips, cloudflared, buf, rclone-fips, step, step-issuer, rclone, caddy, kyverno-policy-reporter-ui-fips, sftpgo, tkn, karma, kyverno-policy-reporter-ui, dap...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: gitness, tkn-fips, gogatekeeper, dapr-fips, caddy-fips, step-ca, step-ca-fips, step-fips, telegraf, step-issuer-fips, cloudflared, buf, rclone-fips, step, step-issuer, rclone, caddy, kyverno-policy-reporter-ui-fips, sftpgo, tkn, karma, kyverno-policy-reporter-ui, dap...

CVE-2026-66010 vulnerabilities

Vulnerabilities for packages: nextcloud-server, wazuh-dashboard-fips, opensearch-dashboards, wazuh-dashboard, awx, gitlab-rails-ce-fips, librechat, kibana, gitlab-rails-ce, langfuse, opensearch-dashboards-fips, langfuse-fips...

CVE-2026-71892

Bouncy Castle for Java versions before 1.86 contain a flaw where opt-in key-size validation on CMS key-transport recipients fails for messages using RFC 9709 content-encryption key derivation (id-alg-cek-hkdf-sha256 ). The root cause is an incorrect comparison between a byte array and an ASN1Obje...

CVE-2026-89407 vulnerabilities

Vulnerabilities for packages: cassandra-fips, wildfly, ontop, gradle, cass-config-builder, solr, seata, hadoop-fips, flink-kubernetes-operator, kafka-bridge, knative-kafka-broker, neo4j, s3proxy-fips, kafbat-ui, opensearch-fips, camunda-zeebe, kates, ontop-fips, traccar-fips, wavefront-proxy,...

GHSA-P6PP-M3F8-5C89 vulnerabilities

Vulnerabilities for packages: cassandra-fips, wildfly, ontop, gradle, cass-config-builder, solr, seata, hadoop-fips, flink-kubernetes-operator, kafka-bridge, knative-kafka-broker, neo4j, s3proxy-fips, kafbat-ui, opensearch-fips, camunda-zeebe, kates, ontop-fips, traccar-fips, wavefront-proxy,...

GO-2026-6615 vulnerabilities

Vulnerabilities for packages: elastic-agent-fips, elastic-agent, grafana, grafana-fips...

GO-2026-6505 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, kwok, ory-kratos-fips, perses, cert-manager-csi-driver, kubernetes-dns-node-cache, redpanda-console, tailscale, amazon-eks-ami-fips, hydra-fips, bank-vaults, secrets-store-csi-driver, istio-fips, krakend-fips, gitlab-pages,...

CVE-2026-17508

The Bouncy Castle for Java cryptographic library (versions before 1.86 , LTS before 2.73.13 , and FIPS before bcpkix-fips 1.0.13, 2.0.13, and 2.1.13) contains a vulnerability where password-based key derivation functions (KDFs) use unbounded cost parameters from untrusted input. Specifically, the...

EUVD-2026-91236

In Bouncy Castle for Java before 1.86, several password-based key derivation entry points ran the KDF with cost parameters taken from the untrusted input being processed, without bounding them, so a small input could dictate an arbitrary amount of work before any password or integrity check could...

GHSA-PRGH-XP8R-P3M5 vulnerabilities

Vulnerabilities for packages: langfuse, librechat, unleash-fips...

CVE-2026-101909 vulnerabilities

Vulnerabilities for packages: nextcloud-server, azurite, lerna, semaphore, lambda-nodejs, wazuh-dashboard-fips, opensearch-dashboards, prism, wazuh-dashboard, kubeflow-centraldashboard, librechat, kibana, langfuse, opensearch-dashboards-fips, langfuse-fips...

CVE-2026-101902 vulnerabilities

Vulnerabilities for packages: nextcloud-server, azurite, lerna, semaphore, lambda-nodejs, wazuh-dashboard-fips, opensearch-dashboards, prism, wazuh-dashboard, kubeflow-centraldashboard, gitlab-rails-ce-fips, librechat, kibana, langfuse, opensearch-dashboards-fips, langfuse-fips...

CVE-2026-101898 vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, semaphore, lambda-nodejs, wazuh-dashboard-fips, opensearch-dashboards, prism, wazuh-dashboard, kubeflow-centraldashboard, gitlab-rails-ce-fips, librechat, kibana, gitlab-rails-ce, langfuse, opensearch-dashboards-fips, langfuse-fips...

CVE-2026-101907 vulnerabilities

Vulnerabilities for packages: nextcloud-server, lerna, semaphore, lambda-nodejs, wazuh-dashboard-fips, opensearch-dashboards, prism, wazuh-dashboard, kubeflow-centraldashboard, gitlab-rails-ce-fips, librechat, kibana, gitlab-rails-ce, langfuse, opensearch-dashboards-fips, langfuse-fips...