GHSA-VMH5-MC38-953G vulnerabilities

Vulnerabilities for packages: kibana, py3-captum, langfuse, vitess, pelias-api, renovate, langfuse-fips, code-server...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: kibana, py3-captum, langfuse, vitess, pelias-api, renovate, langfuse-fips, code-server...

GHSA-PR7R-676H-XCF6 vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli, py3-captum, langfuse, vitess, pelias-api, renovate, langfuse-fips, code-server...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: k9s, helm-mapkubeapis, trivy-fips, chartmuseum-fips, trivy, crossplane, chaos-mesh, chaos-mesh-fips, envoy-gateway-fips, datadog-agent, skaffold-fips, helm-exporter-fips, jfrog-cli, consul-k8s-fips, tigera-operator, trivy-operator, wolfictl,...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: k9s, helm-mapkubeapis, trivy-fips, chartmuseum-fips, trivy, crossplane, chaos-mesh, chaos-mesh-fips, envoy-gateway-fips, datadog-agent, skaffold-fips, helm-exporter-fips, jfrog-cli, consul-k8s-fips, tigera-operator, trivy-operator, wolfictl,...

GHSA-WJ3P-5H3X-C74Q vulnerabilities

Vulnerabilities for packages: backup-restore-operator-fips, backup-restore-operator...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, crossplane-provider-aws-networkmanager-fips, dex-fips, knative-eventing-fips, vault-fips, db-operator, trivy, blob-csi-fips, cert-manager-webhook-pdns, crossplane-provider-aws-kinesis, chaos-mesh-fips, rancher-fleet,...

CVE-2026-49268 vulnerabilities

Vulnerabilities for packages: apache-activemq, neo4j, apache-activemq-fips, apache-jena-fuseki...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: azure-service-operator-fips, crossplane-provider-aws-networkmanager-fips, dex-fips, knative-eventing-fips, vault-fips, db-operator, trivy, blob-csi-fips, cert-manager-webhook-pdns, crossplane-provider-aws-kinesis, chaos-mesh-fips, rancher-fleet,...

GHSA-X96M-RH44-VGV8 vulnerabilities

Vulnerabilities for packages: apache-activemq, neo4j, apache-activemq-fips, apache-jena-fuseki...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: k9s, helm-mapkubeapis, trivy-fips, chartmuseum-fips, trivy, crossplane, chaos-mesh, chaos-mesh-fips, envoy-gateway-fips, datadog-agent, skaffold-fips, helm-exporter-fips, jfrog-cli, consul-k8s-fips, tigera-operator, trivy-operator, wolfictl,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: k9s, helm-mapkubeapis, trivy-fips, chartmuseum-fips, trivy, crossplane, chaos-mesh, chaos-mesh-fips, envoy-gateway-fips, datadog-agent, skaffold-fips, helm-exporter-fips, jfrog-cli, consul-k8s-fips, tigera-operator, trivy-operator, wolfictl,...

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

UBUNTU-CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

EUVD-2026-38412

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653

CVE-2026-55653 affects OpenSSH and describes a double-free in the DH-GEX client path during FIPS known-group validation, allowing a malicious SSH server to terminate the client process and cause a Denial of Service. The issue is tied to processing attacker-controlled DH-GEX group parameters and i...

CVE-2026-55653 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...