4986 matches found
PT-2026-67227
In Bouncy Castle for Java before 1.85, HSS public-key level count unbounded, enabling huge allocation on verify. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
PT-2026-67343
In Bouncy Castle for Java before 1.85, Name Constraints bypass via trailing dot in rfc822Name and URI. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X series, 2.0.2 2.0.X series and 2.1.3 2.1.X series...
PT-2026-67229
In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted without binding to the checked certificate. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bc-fips 2.0.2 2.0.X series and 2.1.3 2.1.X series...
PT-2026-67059
In Bouncy Castle for Java before 1.85, PKCS8 / PBES2 decryptors honour unbounded KDF cost from input. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS BC-FJA before bcpkix-fips 1.0.12 1.0.X series, 2.0.12 2.0.X series and 2.1.12 2.1.X series...
GHSA-93WV-JW9V-4972 vulnerabilities
Vulnerabilities for packages: localstack, seata, spark, spark-kubernetes-operator-fips, zipkin, neo4j, keycloak-fips, apache-camel-karavan-devmode, druid, kafbat-ui-fips, celeborn, kayenta, kserve-modelmesh, elasticsearch, spark-fips, keycloak, camunda-zeebe...
CVE-2026-56819 vulnerabilities
Vulnerabilities for packages: localstack, seata, spark, spark-kubernetes-operator-fips, zipkin, neo4j, keycloak-fips, apache-camel-karavan-devmode, druid, kafbat-ui-fips, celeborn, kayenta, kserve-modelmesh, elasticsearch, spark-fips, keycloak, camunda-zeebe...
GHSA-XR9X-R78C-5HRM vulnerabilities
Vulnerabilities for packages: pghero, pghero-fips, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-66066 vulnerabilities
Vulnerabilities for packages: pghero, pghero-fips, gitlab-rails-ce-fips, gitlab-rails-ce...
CVE-2026-50559 vulnerabilities
Vulnerabilities for packages: apicurio-registry, hono, floci-az, request-9047-keycloak-fips, keycloak-fips...
GHSA-QCXP-GM7M-4J5V vulnerabilities
Vulnerabilities for packages: apicurio-registry, hono, floci-az, request-9047-keycloak-fips, keycloak-fips...
GHSA-X445-F3H2-J279 vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu, langfuse-fips...
GHSA-7RQJ-J65F-68WH vulnerabilities
Vulnerabilities for packages: langfuse, jitsucom-jitsu, langfuse-fips...
openssh security update
An update is available for openssh. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list OpenSSH is an SSH protocol implementation supported by a number of Linux, UNI...
CLEANSTART-2026-XX07268 Security fixes in consul-k8s-fips 1.8.1-r0
Package consul-k8s-fips version 1.8.1-r0 fixes 6 vulnerabilities: CVE-2025-22871, CVE-2025-4674, CVE-2025-47907, CVE-2025-47903, CVE-2025-47906...
CLEANSTART-2026-KD85421 Security fixes in percona-xtradb-cluster-operator-fips 1.18.0-r4
Package percona-xtradb-cluster-operator-fips version 1.18.0-r4 fixes 9 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288...
CLEANSTART-2026-SZ84105 Security fixes in argo-rollouts-fips 1.9.0-r0
Package argo-rollouts-fips version 1.9.0-r0 fixes 13 vulnerabilities: ghsa-93mq-9ffx-83m2, ghsa-cfpf-hrx2-8rv6, ghsa-gxhx-2686-5h9g, ghsa-mh63-6h87-95cp, ghsa-p77j-4mvh-x3m3...
CLEANSTART-2026-VZ08773 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r2
Package kyverno-policy-reporter-kyverno-plugin-fips version 1.3.1-r2 fixes 1 vulnerabilities: CVE-2022-1996...
CLEANSTART-2026-KS00115 Security fixes in opentofu-fips 1.7.10-r3
Package opentofu-fips version 1.7.10-r3 fixes 2 vulnerabilities: ghsa-p77j-4mvh-x3m3, CVE-2026-33186...