GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: nova-fips, cloud-sql-proxy, headlamp-fips, timestamp-authority-fips, thanos-receive-controller, grafana-rollout-operator, frankenphp-8.2, crossplane-provider-aws-rum, crossplane-provider-gcp-beta-container-fips, whereabouts-fips, cilium-envoy-fips, perses-fips,...

GHSA-298W-VVM4-WW55 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, wazuh-dashboard, opensearch-dashboards, wazuh-dashboard-fips...

go-toolset:ol8 security update

delve golang 1.25.9-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586...

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner...

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner...

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner...

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner...

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner...

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-runner-fips, gitlab-cng-fips, gitlab-rails-ce, gitlab-cng, gitlab-runner...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-networkmanager, omnictl-multiarch, crossplane-provider-azure-security, crossplane-provider-azure-storagesync, gptscript, kubevela-fips, vault-benchmark, crossplane-provider-aws-autoscaling-fips, crossplane-provider-aws-networkmanager-fips,...

CVE-2026-8723 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, unleash, kubeflow-katib, argo-workflows, tileserver-gl, wazuh-dashboard-fips, thingsboard, gitlab-rails-ce-fips, prism, sqlpad, tileserver-gl-fips, opensearch-dashboards-fips, kubescape-grype-offline-db, wazuh-dashboard, arangodb, py3-captu...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, unleash, kubeflow-katib, argo-workflows, tileserver-gl, wazuh-dashboard-fips, thingsboard, gitlab-rails-ce-fips, prism, sqlpad, tileserver-gl-fips, opensearch-dashboards-fips, kubescape-grype-offline-db, wazuh-dashboard, arangodb, py3-captu...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: ld-relay-fips, amazon-cloudwatch-agent-operator, cloudzero-agent, fluent-bit-plugin-loki, beats, k8sgpt, metrics-server-fips, opentelemetry-collector-k8s, trillian, istio, cloudzero-agent-fips, minio, telegraf, grafana, karma-fips, aws-otel-collector-fips, keda,...

GHSA-WG65-39GG-5WFJ vulnerabilities

Vulnerabilities for packages: ld-relay-fips, amazon-cloudwatch-agent-operator, cloudzero-agent, fluent-bit-plugin-loki, beats, k8sgpt, metrics-server-fips, opentelemetry-collector-k8s, trillian, istio, cloudzero-agent-fips, minio, telegraf, grafana, karma-fips, aws-otel-collector-fips, keda,...

SUSE SLES12 Security Update : openssh (SUSE-SU-2026:2025-1)

The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:2025-1 advisory. This update for openssh fixes the following issues Tenable has extracted the preceding description block directly from the SUSE security...

CVE-2026-46625 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, opensearch-dashboards-fips, redisinsight, langfuse-fips, opensearch-dashboards, wazuh-dashboard, drupal, saf, wazuh-dashboard-fips...

GHSA-QJX8-664M-686J vulnerabilities

Vulnerabilities for packages: langfuse, kibana, opensearch-dashboards-fips, redisinsight, langfuse-fips, opensearch-dashboards, wazuh-dashboard, drupal, saf, wazuh-dashboard-fips...

SUSE CVE-2026-39829

The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...

GHSA-8RM2-7QQF-34QM vulnerabilities

Vulnerabilities for packages: ld-relay-fips, amazon-cloudwatch-agent-operator, cloudzero-agent, fluent-bit-plugin-loki, beats, k8sgpt, metrics-server-fips, opentelemetry-collector-k8s, trillian, istio, cloudzero-agent-fips, minio, splunk-otel-collector, grafana, telegraf, karma-fips,...

CVE-2026-42154 vulnerabilities

Vulnerabilities for packages: ld-relay-fips, amazon-cloudwatch-agent-operator, cloudzero-agent, fluent-bit-plugin-loki, beats, k8sgpt, metrics-server-fips, opentelemetry-collector-k8s, trillian, istio, cloudzero-agent-fips, minio, splunk-otel-collector, grafana, telegraf, karma-fips,...