CVE-2025-71329 vulnerabilities

Vulnerabilities for packages: langfuse, langfuse-fips...

CVE-2026-56762 vulnerabilities

Vulnerabilities for packages: gemini-cli, langfuse-fips, opensearch-dashboards-fips, opensearch-dashboards, langfuse, kibana, librechat...

GHSA-55CM-P4WW-685G vulnerabilities

Vulnerabilities for packages: gemini-cli, langfuse-fips, opensearch-dashboards-fips, opensearch-dashboards, langfuse, kibana, librechat...

USN-8729-5: Linux kernel (AWS FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM32 architecture; - ARM64 architecture; - PowerPC architecture; - Compute Acceleration Framework; - Drivers core;...

CVE-2026-93604

A flaw was found in vm2. Untrusted guest code can exploit this vulnerability when the crypto builtin is explicitly allowlisted for a NodeVM Node.js Virtual Machine. By calling the crypto.setFips function, an attacker can modify the FIPS Federal Information Processing Standards mode of the entire...

GHSA-R2XF-8XR9-62GW vulnerabilities

Vulnerabilities for packages: wazuh-indexer, kafka-fips, opensearch, hadoop-client-modules, spark, opensearch-fips, spark-fips, ghidra, apache-nifi, apache-camel-karavan-devmode, zookeeper-fips, kafka, hadoop-fips, pinot, pinot-fips, druid, scala, apache-pulsar, akhq, zookeeper, apache-pulsar-fip...

CVE-2026-77421 vulnerabilities

Vulnerabilities for packages: wazuh-indexer, kafka-fips, opensearch, hadoop-client-modules, spark, opensearch-fips, spark-fips, ghidra, apache-nifi, apache-camel-karavan-devmode, zookeeper-fips, kafka, hadoop-fips, pinot, pinot-fips, druid, scala, apache-pulsar, akhq, zookeeper, apache-pulsar-fip...

GHSA-PH9C-7HW9-VHHW vulnerabilities

Vulnerabilities for packages: wazuh-indexer, kafka-fips, opensearch, hadoop-client-modules, spark, opensearch-fips, spark-fips, ghidra, apache-nifi, apache-camel-karavan-devmode, zookeeper-fips, kafka, hadoop-fips, pinot, pinot-fips, druid, scala, apache-pulsar, akhq, zookeeper, apache-pulsar-fip...

CVE-2026-77422 vulnerabilities

Vulnerabilities for packages: wazuh-indexer, kafka-fips, opensearch, hadoop-client-modules, spark, opensearch-fips, spark-fips, ghidra, apache-nifi, apache-camel-karavan-devmode, zookeeper-fips, kafka, hadoop-fips, pinot, pinot-fips, druid, scala, apache-pulsar, akhq, zookeeper, apache-pulsar-fip...

GHSA-5Q95-HRPC-M3W3 vulnerabilities

Vulnerabilities for packages: wazuh-indexer, kafka-fips, opensearch, hadoop-client-modules, spark, elasticsearch-fips, opensearch-fips, spark-fips, ghidra, apache-nifi, apache-camel-karavan-devmode, zookeeper-fips, kafka, sonarqube, hadoop-fips, elasticsearch, pinot, pinot-fips, druid, scala,...

CVE-2026-77420 vulnerabilities

Vulnerabilities for packages: wazuh-indexer, kafka-fips, opensearch, hadoop-client-modules, spark, elasticsearch-fips, opensearch-fips, spark-fips, ghidra, apache-nifi, apache-camel-karavan-devmode, zookeeper-fips, kafka, sonarqube, hadoop-fips, elasticsearch, pinot, pinot-fips, druid, scala,...

ROOT-APP-MAVEN-CVE-2025-8885 CVE-2025-8885 in org.bouncycastle:bc-fips - Patched by Root

Root has patched CVE-2025-8885 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...

CVE-2026-13505

A flaw was found in Bouncy Castle for Java FIPS BC-FJA. Sensitive cryptographic key material, intended to be securely erased from memory zeroised upon garbage collection, may persist longer than expected. This occurs because the zeroisation process relies on a deprecated Java finalization...

GHSA-PHX2-3W66-H4PW vulnerabilities

Vulnerabilities for packages: mlrun-fips, mlrun...

CVE-2026-10766 vulnerabilities

Vulnerabilities for packages: mlrun-fips, mlrun...

Security Bulletin: IBM Sterling Secure Proxy is affected by multiple vulnerabilities in Bouncy Castle for Java FIPS

Summary IBM Sterling Secure Proxy is affected by multiple vulnerabilities CVE-2026-13505, CVE-2026-9563 in Bouncy Castle for Java FIPS and are addressed in version 6.2.1.3. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X...

GHSA-3H96-34P3-XM76 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

ROOT-APP-MAVEN-CVE-2026-13505 CVE-2026-13505 in org.bouncycastle:bc-fips - Patched by Root

Root has patched CVE-2026-13505 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...

org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length

A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...

org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length

A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...