GHSA-H749-FXX7-PWPG vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

GHSA-HV4R-MVR4-25VW vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

CVE-2026-41145 vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

CVE-2026-39414 vulnerabilities

Vulnerabilities for packages: minio, minio-fips...

GHSA-W573-9FFJ-6FF9 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, kserve-modelmesh, grpc-java-fips, flyway-fips, kafbat-ui, pinot, spark-kubernetes-operator-fips, tez, trino, management-api-for-apache-cassandra-5.0, flyway, spark, kayenta-fips, spark-kubernetes-operator, kayenta,...

CVE-2026-45536 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, kserve-modelmesh, grpc-java-fips, flyway-fips, kafbat-ui, pinot, spark-kubernetes-operator-fips, tez, trino, management-api-for-apache-cassandra-5.0, flyway, spark, kayenta-fips, spark-kubernetes-operator, kayenta,...

CVE-2026-45416 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, kserve-modelmesh, grpc-java-fips, apache-camel-karavan-devmode, flyway-fips, kafbat-ui, opensearch, pinot, sonarqube, spark-kubernetes-operator-fips, trino, elasticsearch, management-api-for-apache-cassandra-5.0, flyway, selenium, spark,...

CVE-2026-44249 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, kserve-modelmesh, grpc-java-fips, apache-camel-karavan-devmode, flyway-fips, kafbat-ui, opensearch, pinot, sonarqube, spark-kubernetes-operator-fips, trino, elasticsearch, management-api-for-apache-cassandra-5.0, flyway, selenium, spark,...

GHSA-X4GW-5CX5-PGMH vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, kserve-modelmesh, grpc-java-fips, apache-camel-karavan-devmode, flyway-fips, kafbat-ui, opensearch, pinot, sonarqube, spark-kubernetes-operator-fips, trino, elasticsearch, management-api-for-apache-cassandra-5.0, flyway, selenium, spark,...

GHSA-3QP7-7MW8-WX86 vulnerabilities

Vulnerabilities for packages: strimzi-kafka-operator-fips, kserve-modelmesh, grpc-java-fips, apache-camel-karavan-devmode, flyway-fips, kafbat-ui, opensearch, pinot, sonarqube, spark-kubernetes-operator-fips, trino, elasticsearch, management-api-for-apache-cassandra-5.0, flyway, selenium, spark,...

GHSA-QP9X-WP8F-QGJJ vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, datadog-agent...

GHSA-6GHJ-FRRJ-JJJ3 vulnerabilities

Vulnerabilities for packages: tez, management-api-for-apache-cassandra-4.1, celeborn, management-api-for-apache-cassandra-4.0, pinot, apache-hop, thingsboard, trino, pinot-fips, management-api-for-apache-cassandra-5.0, seata, apache-hop-fips...

CVE-2026-44890 vulnerabilities

Vulnerabilities for packages: tez, management-api-for-apache-cassandra-4.1, celeborn, management-api-for-apache-cassandra-4.0, pinot, apache-hop, thingsboard, trino, pinot-fips, management-api-for-apache-cassandra-5.0, seata, apache-hop-fips...

GHSA-3244-J874-RHC2 vulnerabilities

Vulnerabilities for packages: tez, management-api-for-apache-cassandra-4.1, celeborn, management-api-for-apache-cassandra-4.0, pinot, apache-hop, thingsboard, trino, pinot-fips, management-api-for-apache-cassandra-5.0, seata, apache-hop-fips...

CVE-2026-44250 vulnerabilities

Vulnerabilities for packages: tez, management-api-for-apache-cassandra-4.1, celeborn, management-api-for-apache-cassandra-4.0, pinot, apache-hop, thingsboard, trino, pinot-fips, management-api-for-apache-cassandra-5.0, seata, apache-hop-fips...

PT-2026-47832

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A remote peer can cause unbounded memory allocation leading to a Denial of Service and abnormal termination of an application acting as a QUIC client or server. This occurs when a malicious...

PT-2026-47836

Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur during the decryption of password-encrypted Cryptographic Message Syntax CMS messages. The issue arises because the OpenSSL CMS implementation dereference...

CVE-2026-42770

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

PT-2026-47844

Name of the Vulnerable Software and Affected Versions OpenSSL version 4.0 OpenSSL version 3.6 OpenSSL version 3.5 OpenSSL version 3.4 OpenSSL version 3.0 OpenSSL version 1.1.1 OpenSSL version 1.0.2 Description A use-after-free condition occurs during PKCS7 signature verification when processing a...