CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: nacos, ontop, nacos-docker, conductor-fips, kayenta, camunda-zeebe, kayenta-fips, thingsboard, conductor, ontop-fips, camunda...

CLEANSTART-2026-QE70350 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the tekton-chains-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

CVE-2026-84371 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook, unleash-fips, unleash...

GHSA-G8QQ-57P8-GGW5 vulnerabilities

Vulnerabilities for packages: tensorflow-gpu-jupyter, jupyter-base-notebook, unleash-fips, unleash...

GHSA-G47C-3XMW-Q6M2 vulnerabilities

Vulnerabilities for packages: netbox-fips, awx, authentik, netbox, authentik-fips...

GHSA-2M8G-3CMR-WG3W vulnerabilities

Vulnerabilities for packages: netbox-fips, awx, authentik, netbox, authentik-fips...

CVE-2026-73228 vulnerabilities

Vulnerabilities for packages: netbox-fips, awx, authentik, netbox, authentik-fips...

CVE-2026-73229 vulnerabilities

Vulnerabilities for packages: netbox-fips, awx, authentik, netbox, authentik-fips...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, jupyter-base-notebook, kibana, unleash-proxy, keep-fips, keep, langfuse, tileserver-gl-fips, vitess, commercial-gitlab-rails-ee-fips, opensearch-dashboards, wazuh-dashboard, nextcloud-server, unleash, commercial-gitlab-rails-ee,...

GO-2026-6325 vulnerabilities

Vulnerabilities for packages: grafana-fips, grafana, commercial-grafana...

CVE-2026-73088 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, wazuh-dashboard-fips, jupyter-base-notebook, ts-patch, kubeflow-katib, langfuse-fips, gitlab-rails-ce-fips, vitess, commercial-gitlab-rails-ee-fips, authentik, wazuh-dashboard, tensorflow-gpu-jupyter, langfuse, arangodb, authentik-fip...

CVE-2026-73089 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, wazuh-dashboard-fips, jupyter-base-notebook, ts-patch, kubeflow-katib, langfuse-fips, gitlab-rails-ce-fips, vitess, commercial-gitlab-rails-ee-fips, authentik, wazuh-dashboard, tensorflow-gpu-jupyter, langfuse, arangodb, authentik-fip...

GHSA-73WF-GQ98-2V4G vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, wazuh-dashboard-fips, jupyter-base-notebook, ts-patch, kubeflow-katib, langfuse-fips, gitlab-rails-ce-fips, vitess, commercial-gitlab-rails-ee-fips, authentik, wazuh-dashboard, tensorflow-gpu-jupyter, langfuse, arangodb, authentik-fip...

GHSA-C83G-RGW3-J3CX vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, wazuh-dashboard-fips, jupyter-base-notebook, ts-patch, kubeflow-katib, langfuse-fips, gitlab-rails-ce-fips, vitess, commercial-gitlab-rails-ee-fips, authentik, wazuh-dashboard, tensorflow-gpu-jupyter, langfuse, arangodb, authentik-fip...

Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2025-8916)

Summary There are vulnerabilities in bcpkix-fips-1.0.7.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-8916. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, jupyter-base-notebook, sqlpad, json-server, kibana, unleash-proxy, langfuse, kubescape-grype-offline-db, dotstatsuite-supercore, tileserver-gl-fips, azurite, commercial-gitlab-rails-ee-fips, opensearch-dashboards, code-server,...

CVE-2026-75899 vulnerabilities

Vulnerabilities for packages: argo-workflows, jupyter-base-notebook, kibana, unleash-proxy, keep-fips, keep, langfuse, tileserver-gl-fips, vitess, opensearch-dashboards, wazuh-dashboard, nextcloud-server, unleash, wazuh-dashboard-fips, yaml-language-server, unleash-fips, langfuse-fips, prism,...

CVE-2026-75931 vulnerabilities

Vulnerabilities for packages: kibana, unleash-proxy, keep-fips, keep, langfuse, tileserver-gl-fips, vitess, opensearch-dashboards, wazuh-dashboard, nextcloud-server, unleash, wazuh-dashboard-fips, yaml-language-server, unleash-fips, langfuse-fips, prism, arangodb, gitlab-rails-ce-fips,...

CVE-2026-75975 vulnerabilities

Vulnerabilities for packages: argo-workflows, gitlab-rails-ce, jupyter-base-notebook, kibana, unleash-proxy, keep-fips, keep, langfuse, tileserver-gl-fips, vitess, commercial-gitlab-rails-ee-fips, opensearch-dashboards, wazuh-dashboard, nextcloud-server, unleash, commercial-gitlab-rails-ee,...