6748 matches found
CVE-2026-77421 vulnerabilities
Vulnerabilities for packages: hadoop-client-modules, apache-pulsar-fips, spark, kafka, kafka-fips, wazuh-indexer, scala, apache-pulsar, akhq, ghidra, pinot, opensearch-fips, zookeeper-fips, druid, apache-nifi, hadoop-fips, opensearch, pinot-fips, zookeeper, spark-fips, apache-camel-karavan-devmod...
GHSA-PH9C-7HW9-VHHW vulnerabilities
Vulnerabilities for packages: hadoop-client-modules, apache-pulsar-fips, spark, kafka, kafka-fips, wazuh-indexer, scala, apache-pulsar, akhq, ghidra, pinot, opensearch-fips, zookeeper-fips, druid, apache-nifi, hadoop-fips, opensearch, pinot-fips, zookeeper, spark-fips, apache-camel-karavan-devmod...
CVE-2026-77422 vulnerabilities
Vulnerabilities for packages: hadoop-client-modules, apache-pulsar-fips, spark, kafka, kafka-fips, wazuh-indexer, scala, apache-pulsar, akhq, ghidra, pinot, opensearch-fips, zookeeper-fips, druid, apache-nifi, hadoop-fips, opensearch, pinot-fips, zookeeper, spark-fips, apache-camel-karavan-devmod...
CVE-2026-77420 vulnerabilities
Vulnerabilities for packages: hadoop-client-modules, apache-pulsar-fips, spark, elasticsearch, kafka, kafka-fips, elasticsearch-fips, wazuh-indexer, scala, apache-pulsar, akhq, ghidra, pinot, opensearch-fips, zookeeper-fips, druid, apache-nifi, hadoop-fips, opensearch, pinot-fips, zookeeper,...
GHSA-5Q95-HRPC-M3W3 vulnerabilities
Vulnerabilities for packages: hadoop-client-modules, apache-pulsar-fips, spark, elasticsearch, kafka, kafka-fips, elasticsearch-fips, wazuh-indexer, scala, apache-pulsar, akhq, ghidra, pinot, opensearch-fips, zookeeper-fips, druid, apache-nifi, hadoop-fips, opensearch, pinot-fips, zookeeper,...
ROOT-APP-MAVEN-CVE-2024-29857 CVE-2024-29857 in org.bouncycastle:bcprov-jdk18on - Patched by Root
Root has patched CVE-2024-29857 in the org.bouncycastle:bcprov-jdk18on package for Root:Maven. Multiple fixed versions available...
ROOT-APP-MAVEN-CVE-2025-8885 CVE-2025-8885 in org.bouncycastle:bc-fips - Patched by Root
Root has patched CVE-2025-8885 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...
CVE-2026-13505
A flaw was found in Bouncy Castle for Java FIPS BC-FJA. Sensitive cryptographic key material, intended to be securely erased from memory zeroised upon garbage collection, may persist longer than expected. This occurs because the zeroisation process relies on a deprecated Java finalization...
GHSA-PHX2-3W66-H4PW vulnerabilities
Vulnerabilities for packages: mlrun, mlrun-fips...
CVE-2026-10766 vulnerabilities
Vulnerabilities for packages: mlrun, mlrun-fips...
Security Bulletin: IBM Sterling Secure Proxy is affected by multiple vulnerabilities in Bouncy Castle for Java FIPS
Summary IBM Sterling Secure Proxy is affected by multiple vulnerabilities CVE-2026-13505, CVE-2026-9563 in Bouncy Castle for Java FIPS and are addressed in version 6.2.1.3. Vulnerability Details CVEID:CVE-2026-13505 DESCRIPTION: In Bouncy Castle for Java FIPS BC-FJA before bc-fips 1.0.2.7 1.0.X...
GHSA-3H96-34P3-XM76 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...
ROOT-APP-MAVEN-CVE-2026-13505 CVE-2026-13505 in org.bouncycastle:bc-fips - Patched by Root
Root has patched CVE-2026-13505 in the org.bouncycastle:bc-fips package for Root:Maven. Multiple fixed versions available...
org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length
A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...
org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length
A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...
org.bouncycastle/bcpg-fips: org.bouncycastle/bcpg-jdk15on: org.bouncycastle/bcpg-jdk18on: Bouncy Castle for Java: Denial of Service due to unbounded OpenPGP user-attribute subpacket length
A flaw was found in Bouncy Castle for Java. The software's processing of OpenPGP user-attribute subpackets does not properly limit their length, bounding them only by the Java Virtual Machine JVM maximum memory. A remote attacker could exploit this by sending a specially crafted OpenPGP message,...
golang-fips: Golang FIPS zeroed buffer
A vulnerability was found in Golang FIPS OpenSSL. This flaw allows a malicious user to randomly cause an uninitialized buffer length variable with a zeroed buffer to be returned in FIPS mode. It may also be possible to force a false positive match between non-equal hashes when comparing a trusted...
Oracle Linux 10 : openssl-fips-provider (ELSA-2026-27746)
The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-27746 advisory. 3.0.7-11.0.1 - Add bundle with Oracle Linux 9 OpenSSL FIPS module packages Orabug: 40015480 - Update extract-src.sh script to support non-hobbled openssl...
BIT-ZOOKEEPER-2026-59969 Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode
Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuorum=true, zookeeper.fips-mode=true, ssl.quorum.hostnameVerification=true, and ssl.quorum.clientHostnameVerification=true are enabled, the Java SSLSocket quorum path accepts a CA-trusted pe...