CVE-2026-49838 vulnerabilities

Vulnerabilities for packages: kube-vip-fips, cilium-cli, kube-vip...

GHSA-836R-79RF-4M37 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, open-webui, kubeflow-pipelines-visualization-server, datadog-agent...

CVE-2026-49477 vulnerabilities

Vulnerabilities for packages: datadog-agent-fips, open-webui, kubeflow-pipelines-visualization-server, datadog-agent...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, kyverno-notation-aws, teleport-operator-fips, kyverno-notation-aws-fips, kyverno-fips, tekton-chains, trivy-operator, kubescape-server, spire-server-fips, falcoctl, neuvector-sigstore-interface-fips, trivy, trivy-operator-fips, zarf-fips, teleport,...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: ratify, kubescape, kyverno-notation-aws, teleport-operator-fips, kyverno-notation-aws-fips, kyverno-fips, tekton-chains, trivy-operator, kubescape-server, spire-server-fips, falcoctl, neuvector-sigstore-interface-fips, trivy, trivy-operator-fips, zarf-fips, teleport,...

golang security, bug fix, and enhancement update

1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 - Resolves: RHEL-193476 1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146452 1.25.5-1 - Update to Go 1.25.5 fips-1 - Resolves: RHEL-139364 1.25.3-2 - Cleanup lib/ ownership 1.25.3-1 ...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: dapr, elastic-agent, mattermost, terraform-fips, kots, cluster-autoscaler-fips, cloud-provider-aws-fips, reports-server, vault-fips, karpenter-fips, vault-secrets-operator, prometheus, kube-arangodb-fips, frankenphp-8.3, eks-distro, flux, virt-operator, etcd-fips,...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: elastic-agent, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-acmpca, virt-controller, karpenter-fips, nrdot-collector-k8s, crossplane-provider-aws-xray, crossplane-provider-aws-dynamodb, helm-exporter,...

CLEANSTART-2026-FY61868 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SC97100 Security fixes for CVE-2026-25679, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-32289 applied in versions: 1.13.1-r1, 1.13.2-r0, 1.13.2-r1

Multiple security vulnerabilities affect the velero-plugin-for-microsoft-azure-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SD94217 Security fixes for CVE-2026-42504 applied in versions: 2.8.0-r3

Security vulnerability affects the local-static-provisioner-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CVE-2026-39822 vulnerabilities

Vulnerabilities for packages: dapr, elastic-agent, mattermost, terraform-fips, kots, cluster-autoscaler-fips, cloud-provider-aws-fips, reports-server, vault-fips, karpenter-fips, vault-secrets-operator, prometheus, kube-arangodb-fips, frankenphp-8.3, eks-distro, flux, virt-operator, etcd-fips,...

CVE-2026-42505 vulnerabilities

Vulnerabilities for packages: elastic-agent, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-acmpca, virt-controller, karpenter-fips, nrdot-collector-k8s, crossplane-provider-aws-xray, crossplane-provider-aws-dynamodb, helm-exporter,...

Fedora 44 : openssh (2026-a80275b42d)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-a80275b42d advisory. Improve GSS KEX algorithms documentation ---- - CVE-2026-55653: Fix double free in openssh DH-GEX client path during FIPS known-group validation tha...

Oracle Linux 9 : openssl (ELSA-2026-50379)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-50379 advisory. 3.5.5-4.0.1fips - Replace upstream references in fips man pages Orabug: 35824276 - Update additional upstream references - Add FIPS package change: ad...

GHSA-Q6H5-Q3Q6-F87X vulnerabilities

Vulnerabilities for packages: kubescape-server, kubescape, kubescape-operator-fips, hubble-ui, kubescape-server-fips, hubble-ui-backend-fips, kubescape-operator...

CVE-2026-53935 vulnerabilities

Vulnerabilities for packages: kubescape-server, kubescape, kubescape-operator-fips, hubble-ui, kubescape-server-fips, hubble-ui-backend-fips, kubescape-operator...

JLSEC-2026-658 Deno: Miller-Rabin Primality Test Allows Zero Rounds

Summary node:crypto.checkPrimecandidate, options, callback and crypto.checkPrimeSynccandidate, options ran no Miller-Rabin rounds at all when the caller left options.checks at its default of 0. In that mode, the only test applied to the candidate was trial division by the primes up to 17,863. Any...

Medium: aws-nitro-tpm-tools

Issue Overview: A logic error in CRL distribution point validation in AWS-LC before 1.71.0 causes partitioned CRLs to be incorrectly rejected as out of scope, which allows a revoked certificate to bypass certificate revocation checks. To remediate this issue, users should upgrade to AWS-LC 1.71.0...