6763 matches found
GHSA-GX83-3VF8-GH7J vulnerabilities
Vulnerabilities for packages: s3proxy, flyway-fips, kafka-fips, hadoop-client-modules, confluent-kafka-jre-bcfips, solr, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, kafka, floci, sonarqube, confluent-kafka, cassandra, jenkins, pinot,...
GO-2026-6488 vulnerabilities
Vulnerabilities for packages: grafana, grafana-fips, grafana-geomys-fips, percona-grafana, commercial-grafana...
GHSA-WJGM-6HV5-3CVF vulnerabilities
Vulnerabilities for packages: s3proxy, flyway-fips, kafka-fips, hadoop-client-modules, confluent-kafka-jre-bcfips, solr, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, kafka, floci, sonarqube, confluent-kafka, cassandra, jenkins, pinot,...
CVE-2026-19032 vulnerabilities
Vulnerabilities for packages: s3proxy, flyway-fips, kafka-fips, hadoop-client-modules, confluent-kafka-jre-bcfips, solr, flink-kubernetes-operator, nacos-docker, apache-nifi, camunda-zeebe, keycloak-config-cli, conductor, kafka, floci, sonarqube, confluent-kafka, cassandra, jenkins, pinot,...
AZL-105363 CVE-2026-84782 affecting package openssl-fips-provider 3.1.2-2
Issue summary: The DTLS retransmission logic does not correctly handle a handshake message write that is suspended part-way through. The retransmitted message can be read past the message buffer and the retransmission overwrites the internal state the suspended write needs to resume correctly...
AZL-105369 CVE-2026-75805 affecting package openssl-fips-provider 3.1.2-2
Issue summary: A CMP client that requests certificate revocation on the basis of a PKCS10 CSR may dereference a NULL pointer and terminate abnormally when processing a crafted revocation response. Impact summary: The NULL pointer dereference happens on a read which leads to a crash and a Denial o...
AZL-105354 CVE-2026-75806 affecting package openssl-fips-provider 3.1.2-2
Issue summary: An established DTLS 1.2 association using an AEAD cipher suite can be terminated by a single unauthenticated datagram whose encrypted fragment is shorter than the mandatory explicit IV and authentication tag overhead. Impact summary: An attacker who can send a datagram that is rout...
AZL-105366 CVE-2026-77696 affecting package openssl-fips-provider 3.1.2-2
Issue summary: SM2 signature generation uses non-constant-time arithmetic on secret values, forming a timing side-channel. Impact summary: An attacker able to measure SM2 signing times may learn information about the per-signature secret nonce, which over many signatures can, via a lattice / Hidd...
AZL-105360 CVE-2026-54872 affecting package openssl-fips-provider 3.1.2-2
Issue summary: The generic elliptic-curve scalar multiplication used for ECDSA and SM2 signature operations with curves that do not have a dedicated implementation leaks information about the secret nonce through timing. Impact summary: An attacker able to measure signing times may learn...
AZL-105357 CVE-2026-35189 affecting package openssl-fips-provider 3.1.2-2
Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possible Denial of...
CLEANSTART-2026-HE89623 Security fix for ghsa-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.18.0-r3, kube-state-metrics-fips 2.19.1-r1, istio-pilot-discovery 1.31.1-r0
ghsa-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CVE-2026-59969
A flaw was found in Apache ZooKeeper. When operating in FIPS Federal Information Processing Standards mode with specific Transport Layer Security TLS settings enabled, ZooKeeper's quorum communication fails to properly verify the hostname of peer certificates. This vulnerability allows a maliciou...
libreswan: badly formatted X.509 certificate can cause an assertion failure that crashes the daemon process
A flaw was found in Libreswan. An unauthenticated remote attacker can send a specially crafted X.509 certificate payload during an IKEv1 or IKEv2 exchange. This flaw occurs when Libreswan is operating in FIPS Federal Information Processing Standards mode and processing a certificate with an inval...
MGASA-2026-0456 Updated libreswan package fixes a security vulnerability
FIPS mode assertion failure via malicious CERT payload. CVE-2026-14957...
Updated libreswan package fixes a security vulnerability
FIPS mode assertion failure via malicious CERT payload. CVE-2026-14957...
CVE-2026-53493 vulnerabilities
Vulnerabilities for packages: trivy-operator-fips, kube-arangodb, rancher, consul-k8s-fips, tigera-operator-fips, gatekeeper, neuvector, chaos-mesh-fips, grype-db, harvester, trivy, kgateway-fips, amazon-ecs-agent-fips, packer-fips, dagger, xeol, tracee-fips, syft, docker, kaniko,...
GHSA-PG57-6JWG-Q645 vulnerabilities
Vulnerabilities for packages: trivy-operator-fips, kube-arangodb, rancher, consul-k8s-fips, tigera-operator-fips, gatekeeper, neuvector, chaos-mesh-fips, grype-db, harvester, trivy, kgateway-fips, amazon-ecs-agent-fips, packer-fips, dagger, xeol, tracee-fips, syft, docker, kaniko,...
CVE-2025-71330 vulnerabilities
Vulnerabilities for packages: langfuse, langfuse-fips...