CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, kyverno-notation-aws, zot, policy-controller, gh, flux-source-controller, skaffold, kyverno, buildkitd, gitsign, witness, ko, vexctl, falcoctl, zarf, docker, aactl, cosign, trivy, docker-cli-buildx, crossplane, neuvector-sigstore-interface,...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: kubescape, ratify, kyverno-notation-aws, zot, policy-controller, gh, flux-source-controller, skaffold, kyverno, buildkitd, gitsign, witness, ko, vexctl, falcoctl, zarf, docker, aactl, cosign, trivy, docker-cli-buildx, crossplane, neuvector-sigstore-interface,...

GHSA-HC8W-H2MF-HP59 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

CVE-2026-33414 vulnerabilities

Vulnerabilities for packages: falco-no-driver, prometheus-podman-exporter-fips, prometheus-podman-exporter...

GHSA-R4Q5-VMMM-2653 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, langfuse, opensearch-dashboards-fips, kubeflow-pipelines, dbgate, nextcloud-server, librechat, gitlab-rails-ce, saf, kubeflow-katib, thingsboard, prism, configurable-http-proxy, redisinsight, langfuse-fips, code-server, opensearch-dashboards,...

GHSA-458J-XX4X-4375 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, langfuse-fips, librechat, wazuh-dashboard...

GHSA-39Q2-94RC-95CP vulnerabilities

Vulnerabilities for packages: langfuse, opensearch-dashboards, nextcloud-server, kibana, wazuh-dashboard-fips, langfuse-fips, opensearch-dashboards-fips, librechat, wazuh-dashboard...

GHSA-RR7J-V2Q5-CHGV vulnerabilities

Vulnerabilities for packages: open-webui, langfuse, kibana, langfuse-fips, librechat...

GHSA-77FJ-VX54-GVH7 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, temporal-ui-server, kube-metrics-adapter, fq, gotenberg, temporal, snyk-cli, temporal-ui-server-fips, temporal-fips...

CVE-2026-40890 vulnerabilities

Vulnerabilities for packages: kube-metrics-adapter-fips, temporal-ui-server, kube-metrics-adapter, fq, gotenberg, temporal, snyk-cli, temporal-ui-server-fips, temporal-fips...

GHSA-XM5M-WGH2-RRG3 vulnerabilities

Vulnerabilities for packages: tekton-chains, trivy-operator, sigstore-scaffolding, cloudbeat-fips, tekton-chains-fips, ratify, cosign-fips, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-policy-reporter-plugins-kyverno, cosign, falcoctl-fips, flux-source-controller, gitsign, ko-fips,...

CVE-2026-39984 vulnerabilities

Vulnerabilities for packages: tekton-chains, trivy-operator, sigstore-scaffolding, cloudbeat-fips, tekton-chains-fips, ratify, cosign-fips, kyverno-policy-reporter-plugins-kyverno-fips, kyverno-policy-reporter-plugins-kyverno, cosign, falcoctl-fips, flux-source-controller, gitsign, ko-fips,...

GHSA-JVFF-X2QM-6286 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard...

GHSA-JG4P-7FHP-P32P vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard...

CVE-2026-35213 vulnerabilities

Vulnerabilities for packages: kibana, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard...

CVE-2026-40293 vulnerabilities

Vulnerabilities for packages: commercial-grafana, grafana-fips, openfga, openfga-fips, grafana...

CLEANSTART-2026-DR81473 HashiCorp’s go-getter library up to v1

Multiple security vulnerabilities affect the harbor-scanner-trivy-fips package. HashiCorp’s go-getter library up to v1. See references for individual vulnerability details...

CLEANSTART-2026-AN01004 filippo

Multiple security vulnerabilities affect the percona-xtradb-cluster-operator-fips package. filippo. See references for individual vulnerability details...

CLEANSTART-2026-YY57430 gRPC-Go is the Go language implementation of gRPC

Multiple security vulnerabilities affect the temporal-server-fips package. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CVE-2026-5588 PKIX draft CompositeVerifier accepts empty signature sequence as valid.

Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc. BC-JAVA bcpkix on all pkix modules, Legion of the Bouncy Castle Inc. BCPKIX-FIPS bcpkix on All pkix modules, Legion of the Bouncy Castle Inc. BCPIX-LTS bcpkix on All pkix modules. This vulnerability...