GHSA-4633-3J49-MH5Q vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, homepage, langfuse-fips, keep-fips, peerdb-ui, keep, langfuse...

CVE-2026-59896 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, langfuse-fips, librechat, wazuh-dashboard, langfuse...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter, hono, kserve-modelmesh, kafbat-ui-fips, spark, strimzi-kafka-operator, grpc-java-fips, knative-kafka-broker, tez, conductor, floci, wazuh-indexer, apache-pulsar-fips, zipkin, cassandra-reaper, celeborn, localstack, opensearch, spark-fips,...

CVE-2026-54291 vulnerabilities

Vulnerabilities for packages: ghidra, hono, nacos-docker, conductor, floci, dependency-track, guacamole-client, kayenta, seata, camunda, dependency-track-apiserver, airbyte-server-fips, druid, flyway, kayenta-fips, request-9047-keycloak-fips, traccar, apicurio-registry, traccar-fips, thingsboard,...

GHSA-J92G-9F8W-J867 vulnerabilities

Vulnerabilities for packages: ghidra, hono, nacos-docker, conductor, floci, dependency-track, guacamole-client, kayenta, seata, camunda, dependency-track-apiserver, airbyte-server-fips, druid, flyway, kayenta-fips, request-9047-keycloak-fips, traccar, apicurio-registry, traccar-fips, thingsboard,...

openssl security update

3.5.5-5.0.1 - Replace upstream references Orabug: 34340177 - Update FIPS provider name Orabug: 35824276 1:3.5.5-5 - Patch asn1d2ireadbio to read headers without blocking Resolves: RHEL-169991 1:3.5.5-4 - Fix CVE-2026-7383, CVE-2026-9076, CVE-2026-34180, CVE-2026-34181, CVE-2026-34183,...

GHSA-R7WM-3CXJ-WFF9 vulnerabilities

Vulnerabilities for packages: hadoop-client-modules, nacos-docker, strimzi-kafka-operator, zaproxy, tez, conductor, spdx-tools-java, dependency-track, ontop-fips, opensearch, cass-config-builder-fips, apache-nifi-registry, kayenta, gradle, s3proxy, apache-nifi, strimzi-kafka-operator-fips,...

CVE-2026-41053 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-4J6X-2764-M8GH vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2026-41052 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2026-44939 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-MHC6-2GFQ-XX62 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

GHSA-VX8H-4PRV-G744 vulnerabilities

Vulnerabilities for packages: harvester-fips, harvester...

CVE-2026-62290 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver-fips, cert-manager-csi-driver-fips, commercial-nginx-ingress, cert-manager-openshift-routes, cert-manager-openshift-routes-fips, gitlab-operator, mariadb-operator, percona-xtradb-cluster-operator-fips, cert-manager-webhook-pdns,...

GHSA-JPJM-C3R5-Q96R vulnerabilities

Vulnerabilities for packages: open-cluster-management-fips, ansible-operator, porch-fips, crossplane-provider-aws-ec2, chisel, commercial-nginx-ingress, packer-fips, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-location-fips, cue, crossplane-provider-aws-s3, terrafmt,...

CVE-2026-56852 vulnerabilities

Vulnerabilities for packages: open-cluster-management-fips, ansible-operator, porch-fips, crossplane-provider-aws-ec2, chisel, commercial-nginx-ingress, packer-fips, crossplane-provider-aws-guardduty-fips, crossplane-provider-aws-location-fips, cue, crossplane-provider-aws-s3, terrafmt,...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: ansible-operator, grype-fips, packer-fips, rabbitmq-cluster-operator-fips, frankenphp-8.3, crossplane-provider-aws-transcribe-fips, ansible-operator-fips, secrets-store-csi-driver-provider-gcp, crossplane-provider-aws-cloudsearch-fips, kube-vip-cloud-provider,...

Oracle Linux 10 : golang (ELSA-2026-22120)

The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-22120 advisory. 1.26.5-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var 1.26.5-1 - Update to Go 1.26.5 fips-1 1.25.7-1 - Update to Go 1.25.7 fips-1...

CVE-2026-59877 vulnerabilities

Vulnerabilities for packages: vitess, jitsucom-jitsu, homepage, langfuse-fips, opentelemetry-auto-instrumentations-node, pulumi, cadence-web, librechat, thingsboard-fips, nemo, kubeflow-centraldashboard, kibana...

GHSA-J3F2-48V5-CCWW vulnerabilities

Vulnerabilities for packages: vitess, jitsucom-jitsu, homepage, langfuse-fips, opentelemetry-auto-instrumentations-node, pulumi, cadence-web, librechat, thingsboard-fips, nemo, kubeflow-centraldashboard, kibana...