CVE-2026-17106 vulnerabilities

Vulnerabilities for packages: falcoctl, buildkitd-fips, kubescape, buildkitd, kubescape-server, skaffold, buildah, ctop-fips, kaniko, docker-fips, skaffold-fips, podman, docker-cli-buildx, falcoctl-fips, openbao-fips, docker-cli-buildx-fips, kubescape-server-fips, telegraf, openbao, podman-fips,...

GHSA-2326-HX7G-3M9R vulnerabilities

Vulnerabilities for packages: hadoop-fips...

CVE-2024-41909 vulnerabilities

Vulnerabilities for packages: hadoop-fips...

GO-2026-4950 vulnerabilities

Vulnerabilities for packages: dapr-fips, dapr...

GO-2026-6237 vulnerabilities

Vulnerabilities for packages: cni-plugins, cni-plugins-fips, kube-vip-fips, kube-vip, amazon-k8s-cni-fips...

CVE-2026-59902 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, apache-hop-fips, management-api-for-apache-cassandra-5.0, pinot-fips, tez, management-api-for-apache-cassandra-4.0, thingsboard, tinkerpop, celeborn, trino, seata, hadoop-fips, pinot...

GHSA-2QJ4-MMR9-4V2F vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, apache-hop-fips, management-api-for-apache-cassandra-5.0, pinot-fips, tez, management-api-for-apache-cassandra-4.0, thingsboard, tinkerpop, celeborn, trino, seata, hadoop-fips, pinot...

CVE-2026-71491 vulnerabilities

Vulnerabilities for packages: mycli, datahub-ingestion, mlflow-fips, openstack-glance-2026.1, openstack-glance-2025.1-fips, openstack-glance-2025.2, openstack-horizon-2026.1, mlflow, airflow-postgres-fips, openstack-glance-2025.2-fips, openstack-nova-2026.1, openstack-placement-2026.1, netbox,...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, management-api-for-apache-cassandra-4.0, wazuh-indexer, logstash, celeborn, pinot-fips, camunda, s3proxy-fips, s3proxy, keycloak-fips, kafka-bridge, kayenta, airbyte-platform, zipkin, druid, neo4j, apicurio-registry-fips, tinkerpop,...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: apache-activemq-artemis, management-api-for-apache-cassandra-4.0, wazuh-indexer, logstash, celeborn, pinot-fips, camunda, s3proxy-fips, s3proxy, keycloak-fips, kafka-bridge, kayenta, airbyte-platform, zipkin, druid, neo4j, apicurio-registry-fips, tinkerpop,...

GHSA-GQGW-JGHV-MXWX vulnerabilities

Vulnerabilities for packages: netbox-fips...

CVE-2026-9318 vulnerabilities

Vulnerabilities for packages: netbox-fips...

CVE-2026-10722 vulnerabilities

Vulnerabilities for packages: falcoctl, envoy-gateway-fips, cosmo-router, rke2-runtime-fips, kubescape, agentbeat-fips, kubescape-server, cosmo-router-fips, hubble-ui-backend-fips, k3s, rke2-runtime, hubble-fips, beats, ctop-fips, containerd-fips, opentelemetry-ebpf-instrumentation-fips,...

GHSA-XHGW-QWWF-PG32 vulnerabilities

Vulnerabilities for packages: falcoctl, envoy-gateway-fips, cosmo-router, rke2-runtime-fips, kubescape, agentbeat-fips, kubescape-server, cosmo-router-fips, hubble-ui-backend-fips, k3s, rke2-runtime, hubble-fips, beats, ctop-fips, containerd-fips, opentelemetry-ebpf-instrumentation-fips,...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

Moderate: Red Hat Security Advisory: butane security update

An update for butane is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Moderate: Red Hat Security Advisory: butane security update

An update for butane is now available for Red Hat Enterprise Linux 9.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

golang-fips: Golang FIPS zeroed buffer

A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...

RHEL 9 : butane (RHSA-2026:55525)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55525 advisory. Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. Securit...

RHEL 9 : butane (RHSA-2026:55520)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2026:55520 advisory. Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. Securit...