CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, nrdot-collector-k8s, aws-otel-collector, minio-operator, tempo-fips, certificate-transparency-fips, trillian, tempo, beats-fips, ops-agent, prometheus-pushgateway-fips, cloud-sql-proxy-fips, commercial-grafana, mc, minio-fips, agentbeat,...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: prometheus-operator-fips, nrdot-collector-k8s, aws-otel-collector, minio-operator, tempo-fips, certificate-transparency-fips, trillian, tempo, beats-fips, ops-agent, prometheus-pushgateway-fips, cloud-sql-proxy-fips, commercial-grafana, mc, minio-fips, agentbeat,...

SUSE SLES12 Security Update : openssh (SUSE-SU-2026:2025-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2025-1 advisory. This update for openssh fixes the following issues Tenable has extracted the preceding description block directly from the SUSE security...

CVE-2026-46625 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, langfuse-fips, langfuse, redisinsight, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, drupal, gitlab-rails-ce, saf, kibana, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, commercial-gitlab-rails-ee...

GHSA-QJX8-664M-686J vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, langfuse-fips, langfuse, redisinsight, opensearch-dashboards-fips, commercial-gitlab-rails-ee-fips, drupal, gitlab-rails-ce, saf, kibana, wazuh-dashboard-fips, gitlab-rails-ce-fips, opensearch-dashboards, commercial-gitlab-rails-ee...

SUSE CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: nrdot-collector-k8s, aws-otel-collector, splunk-otel-collector, minio-operator, tempo-fips, certificate-transparency-fips, trillian, tempo, beats-fips, ops-agent, prometheus-pushgateway-fips, cloud-sql-proxy-fips, commercial-grafana, mc, minio-fips, agentbeat,...

GHSA-8RM2-7QQF-34QM vulnerabilities

Vulnerabilities for packages: nrdot-collector-k8s, aws-otel-collector, splunk-otel-collector, minio-operator, tempo-fips, certificate-transparency-fips, trillian, tempo, beats-fips, ops-agent, prometheus-pushgateway-fips, cloud-sql-proxy-fips, commercial-grafana, mc, minio-fips, agentbeat,...

CVE-2026-46680 vulnerabilities

Vulnerabilities for packages: chaos-mesh, kargo, cluster-api-helm-controller, kube-arangodb-fips, tw, dagger, trivy-fips, containerd-fips, google-osconfig-agent, scorecard, gatekeeper, headlamp, neuvector-fips, kubevela-fips, chainctl-fips, linkerd2, gitlab-rails-ce-fips, packer-fips,...

USN-8281-2 linux-azure-4.15, linux-azure-fips vulnerabilities

It was discovered that the Linux kernel algifaead module did not properly handle in-place cryptographic operations. This flaw is known as Copy Fail. A local attacker could use this to escalate privileges, or possibly escape a container. CVE-2026-31431 Several security issues were discovered in th...

USN-8296-1: Linux kernel (FIPS) vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Drivers core; - Null block device drive...

GHSA-XH8F-G2QW-GCM7 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

CVE-2026-42600 vulnerabilities

Vulnerabilities for packages: minio-fips, minio...

CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

GO-2026-5018 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

CVE-2026-33637 vulnerabilities

Vulnerabilities for packages: logstash-fips, logstash, gitlab-cng, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, cinc-auditor, kube-logging-operator...

GHSA-5RV5-XJ5J-3484 vulnerabilities

Vulnerabilities for packages: logstash-fips, logstash, gitlab-cng, kube-fluentd-operator, gitlab-rails-ce, gitlab-rails-ce-fips, cinc-auditor, kube-logging-operator...

libcrux-digest (>=0.0.4-pre.1, <=0.0.9-pre.1), libcrux-kem (>=0.0.2-alpha.1, <=0.0.2) +11 more potentially affected by unknown CVE via libcrux-sha3 (>=0.0.2-beta.3, <=0.0.10-pre.1)

libcrux-sha3 CARGO version =0.0.2-beta.3, =0.0.4-pre.1, =0.0.2-alpha.1, =0.0.3, =0.0.2-alpha.1, =1.20.4, =0.2.0, =0.4.3, =0.8.0 - wpa-next 0.1.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0208...

CLEANSTART-2026-MJ26242 Security fixes for CVE-2026-41602, ghsa-wf45-q9ch-q8gh applied in versions: 1.300066.1-r0

Multiple security vulnerabilities affect the amazon-cloudwatch-agent-fips package. These issues are resolved in later releases. See references for individual vulnerability details...