7576 matches found
GO-2026-6274 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GO-2026-6275 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GO-2026-6258 vulnerabilities
Vulnerabilities for packages: thanos-receive-controller, cortex-fips, thanos-fips, cortex-geomys-fips, thanos-receive-controller-fips, pulumi-language-yaml, tempo-fips, thanos, tempo, cortex...
GO-2026-6250 vulnerabilities
Vulnerabilities for packages: kubescape, kubescape-server-fips, kubescape-server, cloudbeat-fips, cloudbeat...
CVE-2026-55677 vulnerabilities
Vulnerabilities for packages: falcosidekick-ui, listmonk, temporal-fips, temporal-ui-server, kube-metrics-adapter-fips, falcosidekick-ui-fips, kube-metrics-adapter, temporal, temporal-ui-server-fips...
Denial-of-Service (DoS)
Bouncy Castle for Java FIPS BC-FJA is vulnerable to a Denial-of-Service DoS. the vulnerability is due to the JNI seeding routine repeatedly retrying the RDSEED/RDRAND CPU instructions without a limit when entropy generation fails, which allows an attacker or environmental condition causing...
Unity Linux 20.1050a / 20.1060a / 20.1070a Security Update: openssh (UTSA-2026-104841)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104841 advisory. A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie- Hellman Group Exchange DH-GEX client path. This occurs...
GHSA-W67G-5RQW-F597 vulnerabilities
Vulnerabilities for packages: redis-operator-fips, virt-controller-fips, aws-node-termination-handler, virt-handler, cloudflared, etcd-fips, prometheus, eks-distro-fips, virt-api-fips, cluster-api, op-geth, gpu-operator, virt-launcher, verticadb-operator, virt-api, infinispan-operator, containerd...
AZL-97671 CVE-2026-75803 affecting package openssl-fips-provider 3.1.2-2
Issue summary: ChaCha20-Poly1305 and AES-OCB decryption with an empty ciphertext can report success without verifying the supplied authentication tag when the operation is finalized by calling the EVPCipher function. Impact summary: Applications calling EVPCipher on an empty ciphertext and...
AZL-97668 CVE-2026-54874 affecting package openssl-fips-provider 3.1.2-2
Issue summary: Receiving a DTLS record for a future epoch while a handshake is in progress causes OpenSSL to buffer far more memory than the record itself requires. Impact summary: A peer can use a small amount of network traffic to make an OpenSSL DTLS endpoint retain a disproportionately large...
SUSE-RU-2026:3712-1 Security update 5.1.5 for Multi-Linux Manager Server
This update fixes the following issues: Release Notes Highlights: - Update to SUSE Multi-Linux Manager 5.1.5 Added known issue for missing BasicConstraints Critical flag Added a note about disk-check parameters semantics change Added a note about enabling FIPS mode after installing SUSE Multi-Lin...
CVE-2026-77354 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GHSA-XHJ3-7XW9-VR34 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GHSA-MMFR-PMJX-HW9W vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
CVE-2026-76905 vulnerabilities
Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...
GHSA-GGR8-5VV4-36MX vulnerabilities
Vulnerabilities for packages: langfuse, authentik, langfuse-fips, authentik-fips...
CVE-2026-40345 vulnerabilities
Vulnerabilities for packages: langfuse, authentik, langfuse-fips, authentik-fips...
GHSA-Q6H7-XXP7-7429 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, keycloak, keycloak-fips...