5471 matches found
USN-8296-1: Linux kernel (FIPS) vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - x86 architecture; - Compute Acceleration Framework; - Drivers core; - Null block device drive...
CVE-2026-42600 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
GHSA-XH8F-G2QW-GCM7 vulnerabilities
Vulnerabilities for packages: minio-fips, minio...
CVE-2026-39829
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...
CVE-2026-39829 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...
GO-2026-5018 Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh
The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes of CPU consumption during signature verification. This could be triggered by unauthenticated clients during public...
CVE-2026-33637 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, logstash-fips, gitlab-cng, gitlab-rails-ce, kube-fluentd-operator, gitlab-rails-ce-fips, logstash...
GHSA-5RV5-XJ5J-3484 vulnerabilities
Vulnerabilities for packages: kube-logging-operator, cinc-auditor, logstash-fips, gitlab-cng, gitlab-rails-ce, kube-fluentd-operator, gitlab-rails-ce-fips, logstash...
CLEANSTART-2026-MJ26242 Security fixes for CVE-2026-41602, ghsa-wf45-q9ch-q8gh applied in versions: 1.300066.1-r0
Multiple security vulnerabilities affect the amazon-cloudwatch-agent-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-YH23797 Security fixes for CVE-2026-24051, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-39883, CVE-2026-42499, CVE-2026-42501, ghsa-9h8m-3fm2-qjrq, ghsa-hfvc-g4fc-pqhx, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3 applied in versions: 1.30.0-r0, 1.30.0-r1
Multiple security vulnerabilities affect the cass-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-IW91368 Security fixes for CVE-2026-27143, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499 applied in versions: 7.14.0-r0
Multiple security vulnerabilities affect the kubernetes-dashboard-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-GZ35045 Security fixes for CVE-2024-36537, CVE-2025-47910, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2026-25518, CVE-2026-27143, CVE-2026-27144, CVE-2026-29181, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-32952, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-35469, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-gx3x-vq4p-mhhv, ghsa-hr2v-4r36-88hr, ghsa-mh2q-q3fh-2475, ghsa-p77j-4mvh-x3m3, ghsa-pc3f-x583-g7j2, ghsa-pjcq-xvwq-hhpj applied in versions: 2.4.0-r1, 2.4.0-r2, 2.4.0-r3
Multiple security vulnerabilities affect the cert-manager-cmctl-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-42708
Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description RSA and DSA public key parsers fail to enforce size limits on key parameters. An unauthenticated client can trigger excessive CPU consumption during signature...
CVE-2026-45740 vulnerabilities
Vulnerabilities for packages: cadence-web, librechat, renovate, langfuse-fips, gemini-cli, jitsucom-jitsu, pulumi, nemo, vitess, langfuse, kibana...
GHSA-58QX-3VCG-4XPX vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, drupal, py3-jupyterlab, gemini-cli, gitlab-rails-ce, kubeflow-katib, kibana, wazuh-dashboard-fips, vitess, langfuse, arangodb, homepage, code-server, langfuse-fips, redisinsight, gitlab-rails-ce-fips, opensearch-dashboards, argo-workflows,...
CVE-2026-45736 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, drupal, py3-jupyterlab, gemini-cli, gitlab-rails-ce, kubeflow-katib, kibana, wazuh-dashboard-fips, vitess, langfuse, arangodb, homepage, code-server, langfuse-fips, redisinsight, gitlab-rails-ce-fips, opensearch-dashboards, argo-workflows,...
GHSA-JGGG-4JG4-V7C6 vulnerabilities
Vulnerabilities for packages: cadence-web, librechat, renovate, langfuse-fips, gemini-cli, jitsucom-jitsu, pulumi, nemo, vitess, langfuse, kibana...
GHSA-JXXR-4GWJ-5JF2 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, airflow, kibana, authentik-fips, emscripten, tileserver-gl, ts-patch, lerna, authentik, pulumi, vitess, langfuse, arangodb, renovate, actions-runner, npm, tileserver-gl-fips, langfuse-fips, prism, opensearch-dashboards...
CVE-2026-45149 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, airflow, kibana, authentik-fips, emscripten, tileserver-gl, ts-patch, lerna, authentik, pulumi, vitess, langfuse, arangodb, renovate, actions-runner, npm, tileserver-gl-fips, langfuse-fips, prism, opensearch-dashboards...