NewStart CGSL MAIN 7.02 : openssl Vulnerability (NS-SA-2026-0038)

The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by a vulnerability: - Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This...

GHSA-JQCQ-XJH3-6G23 vulnerabilities

Vulnerabilities for packages: telegraf, splunk-otel-collector, teleport, splunk-otel-collector-fips, bento-fips, kots, grafana-alloy, bento, steampipe, grafana-alloy-fips...

GHSA-X6GF-MPR2-68H6 vulnerabilities

Vulnerabilities for packages: hydra-fips, wavefront-collector-for-kubernetes, harbor-fips, argo-workflows-fips, bento, ory-kratos-fips, vault, argo-workflows, telegraf, bento-fips, vault-fips, steampipe, grafana-alloy-fips, trillian-fips, flyte, src, harbor, migrate, teleport-operator-fips, kots,...

CVE-2026-4427 vulnerabilities

Vulnerabilities for packages: hydra-fips, wavefront-collector-for-kubernetes, harbor-fips, argo-workflows-fips, bento, ory-kratos-fips, vault, argo-workflows, telegraf, bento-fips, vault-fips, steampipe, grafana-alloy-fips, trillian-fips, flyte, src, harbor, migrate, teleport-operator-fips, kots,...

OESA-2026-1752 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based...

CVE-2026-33726 vulnerabilities

Vulnerabilities for packages: kubescape-server-fips, kubescape-operator, kubescape-server, hubble, hubble-ui-backend-fips, hubble-ui, kubescape, kubescape-operator-fips, hubble-fips...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, hadoop-fips, kafka-bridge-fips, seata, spark-fips, thingsboard, apache-pulsar-fips, strimzi-kafka-operator, spark, infinispan, elasticsearch, camunda-zeebe, trino, celeborn, zipkin, druid, tez, kserve-modelmesh, grpc-java-fips, localstack,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: knative-kafka-broker, hadoop-fips, kafka-bridge-fips, seata, spark-fips, thingsboard, apache-pulsar-fips, strimzi-kafka-operator, spark, infinispan, elasticsearch, camunda-zeebe, trino, celeborn, zipkin, druid, tez, kserve-modelmesh, grpc-java-fips, localstack,...

GHSA-4VRQ-3VRQ-G6GG vulnerabilities

Vulnerabilities for packages: podman-fips, trivy-operator-fips, podman, docker-compose-fips, osv-scanner, trivy-fips, conftest, conftest-fips, guac, trivy, kubescape, cloudbeat, kubescape-server-fips, kaniko, cloudbeat-fips, skaffold, livekit-cli, docker-cli-buildx-fips, kubescape-server, zot,...

CVE-2026-33747 vulnerabilities

Vulnerabilities for packages: podman-fips, trivy-operator-fips, podman, docker-compose-fips, osv-scanner, trivy-fips, conftest, conftest-fips, guac, trivy, kubescape, cloudbeat, kubescape-server-fips, kaniko, cloudbeat-fips, skaffold, livekit-cli, docker-cli-buildx-fips, kubescape-server, zot,...

CVE-2026-33748 vulnerabilities

Vulnerabilities for packages: podman-fips, trivy-operator-fips, podman, docker-compose-fips, osv-scanner, trivy-fips, conftest, conftest-fips, guac, trivy, kubescape, cloudbeat, kubescape-server-fips, kaniko, cloudbeat-fips, skaffold, livekit-cli, docker-cli-buildx-fips, kubescape-server, zot,...

GHSA-4C29-8RGM-JVJJ vulnerabilities

Vulnerabilities for packages: podman-fips, trivy-operator-fips, podman, docker-compose-fips, osv-scanner, trivy-fips, conftest, conftest-fips, guac, trivy, kubescape, cloudbeat, kubescape-server-fips, kaniko, cloudbeat-fips, skaffold, livekit-cli, docker-cli-buildx-fips, kubescape-server, zot,...

GHSA-4773-3JFM-QMX3 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips, conductor, conductor-fips, kafbat-ui-fips, apache-nifi-registry, nacos, nacos-docker, thingsboard, camunda, kayenta-fips, camunda-zeebe, kayenta, kafbat-ui...

CVE-2026-22737 vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips, conductor, conductor-fips, kafbat-ui-fips, apache-nifi-registry, nacos, nacos-docker, thingsboard, camunda, kayenta-fips, camunda-zeebe, kayenta, kafbat-ui...

GHSA-6HCQ-HMM3-JJ3C vulnerabilities

Vulnerabilities for packages: apache-activemq, apache-activemq-fips, conductor, conductor-fips, kafbat-ui-fips, apache-nifi-registry, nacos, nacos-docker, thingsboard, camunda, kayenta-fips, camunda-zeebe, kayenta, kafbat-ui...

GHSA-CP57-FQ8G-QH6V libcrux has an Incorrect Check of Signer Response Norm During Verification

The ML-DSA verification algorithm as specified in FIPS 204, subsection 6.3 requires verifiers to check that the infinity norm of the deserialized signer response $z$ does not exceed $\gamma1 - \beta$ line 13 of Algorithm 8. The same check is required to be performed during signature generation...

GHSA-CV4X-93XX-WGFJ vulnerabilities

Vulnerabilities for packages: tkn-fips, tekton-chains-fips, tekton-chains, tkn, tekton-pipelines, tekton-pipelines-fips...

CVE-2026-33022 vulnerabilities

Vulnerabilities for packages: tkn-fips, tekton-chains-fips, tekton-chains, tkn, tekton-pipelines, tekton-pipelines-fips...

GHSA-GC5V-M9X4-R6X2 vulnerabilities

Vulnerabilities for packages: graalvm, metaflow-service-fips, nemo, keep-fips, prefect, openstack-kolla-toolbox-2025.2, openstack-kolla-toolbox-2025.1-fips, tritonserver-backend-vllm-cuda-12.9, vllm-openai-cuda-12.9, ggshield, k8s-sidecar, kubeflow-katib, superset, text-generation-inference,...

CVE-2026-25645 vulnerabilities

Vulnerabilities for packages: graalvm, metaflow-service-fips, nemo, keep-fips, prefect, openstack-kolla-toolbox-2025.2, openstack-kolla-toolbox-2025.1-fips, tritonserver-backend-vllm-cuda-12.9, vllm-openai-cuda-12.9, ggshield, k8s-sidecar, kubeflow-katib, superset, text-generation-inference,...