CVE-2026-65182 vulnerabilities

Vulnerabilities for packages: kayenta-fips, camunda, camunda-zeebe, nacos, ontop, ontop-fips, thingsboard, conductor, conductor-fips, nacos-docker, kayenta...

CLEANSTART-2026-QE70350 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Multiple security vulnerabilities affect the tekton-chains-fips package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See referenc...

CLEANSTART-2026-RD72054 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log

Multiple security vulnerabilities affect the grype-fips package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...

GHSA-G8QQ-57P8-GGW5 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, unleash, tensorflow-gpu-jupyter, unleash-fips...

CVE-2026-84371 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, unleash, tensorflow-gpu-jupyter, unleash-fips...

GHSA-2M8G-3CMR-WG3W vulnerabilities

Vulnerabilities for packages: authentik-fips, awx, authentik, netbox, netbox-fips...

GHSA-G47C-3XMW-Q6M2 vulnerabilities

Vulnerabilities for packages: authentik-fips, awx, authentik, netbox, netbox-fips...

CVE-2026-73228 vulnerabilities

Vulnerabilities for packages: authentik-fips, awx, authentik, netbox, netbox-fips...

CVE-2026-73229 vulnerabilities

Vulnerabilities for packages: authentik-fips, awx, authentik, netbox, netbox-fips...

GHSA-JQFF-G426-HQXP vulnerabilities

Vulnerabilities for packages: unleash-fips, nextcloud-server, langfuse, jupyter-base-notebook, keep, keep-fips, argo-workflows, prism, arangodb, unleash, opensearch-dashboards, langfuse-fips, gitlab-rails-ce, tileserver-gl-fips, opensearch-dashboards-fips, tensorflow-gpu-jupyter, wazuh-dashboard,...

GO-2026-6325 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana-fips, grafana...

CVE-2026-73088 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, arangodb, wazuh-dashboard, authentik-fips, kubeflow-katib, langfuse-fips, ts-patch, vitess, gitlab-rails-ce-fips, langfuse, jupyter-base-notebook, authentik, gitlab-rails-ce, nextcloud-server, commercial-gitlab-rails-ee-fips,...

GHSA-C83G-RGW3-J3CX vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, arangodb, wazuh-dashboard, authentik-fips, kubeflow-katib, langfuse-fips, ts-patch, vitess, gitlab-rails-ce-fips, langfuse, jupyter-base-notebook, authentik, gitlab-rails-ce, nextcloud-server, commercial-gitlab-rails-ee-fips,...

GHSA-73WF-GQ98-2V4G vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, arangodb, wazuh-dashboard, authentik-fips, kubeflow-katib, langfuse-fips, ts-patch, vitess, gitlab-rails-ce-fips, langfuse, jupyter-base-notebook, authentik, gitlab-rails-ce, nextcloud-server, commercial-gitlab-rails-ee-fips,...

CVE-2026-73089 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard-fips, arangodb, wazuh-dashboard, authentik-fips, kubeflow-katib, langfuse-fips, ts-patch, vitess, gitlab-rails-ce-fips, langfuse, jupyter-base-notebook, authentik, gitlab-rails-ce, nextcloud-server, commercial-gitlab-rails-ee-fips,...

Security Bulletin: MongoDB Enterprised Advanced affected by: Allocation of Resources Without Limits or Throttling (CVE-2025-8916)

Summary There are vulnerabilities in bcpkix-fips-1.0.7.jar used in MongoDB Enterprised Advanced for IBM, involving CVE-2025-8916. The vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2025-8916 DESCRIPTION: Allocation of Resources Without Limits or Throttling vulnerability in...

CVE-2026-75975 vulnerabilities

Vulnerabilities for packages: unleash-fips, nextcloud-server, langfuse, jupyter-base-notebook, keep, keep-fips, argo-workflows, prism, arangodb, unleash, opensearch-dashboards, langfuse-fips, gitlab-rails-ce, tileserver-gl-fips, opensearch-dashboards-fips, tensorflow-gpu-jupyter, wazuh-dashboard,...

CVE-2026-82417 vulnerabilities

Vulnerabilities for packages: json-server, azurite, unleash-fips, sqlpad, langfuse, jupyter-base-notebook, kubeflow-centraldashboard, argo-workflows, prism, kubescape-grype-offline-db, arangodb, unleash, opensearch-dashboards, renovate, pelias-api, langfuse-fips, gitlab-rails-ce,...

CVE-2026-75899 vulnerabilities

Vulnerabilities for packages: unleash-fips, nextcloud-server, langfuse, jupyter-base-notebook, keep, keep-fips, argo-workflows, prism, arangodb, unleash, opensearch-dashboards, langfuse-fips, tileserver-gl-fips, opensearch-dashboards-fips, tensorflow-gpu-jupyter, wazuh-dashboard, vitess,...

CVE-2026-75931 vulnerabilities

Vulnerabilities for packages: unleash-fips, nextcloud-server, langfuse, keep, keep-fips, prism, arangodb, unleash, opensearch-dashboards, langfuse-fips, tileserver-gl-fips, opensearch-dashboards-fips, wazuh-dashboard, vitess, gitlab-rails-ce-fips, yaml-language-server, kibana, unleash-proxy,...