5517 matches found
CVE-2026-33504 vulnerabilities
Vulnerabilities for packages: hydra-fips, hydra...
GHSA-R9W3-57W2-GCH2 vulnerabilities
Vulnerabilities for packages: hydra-fips, hydra...
NewStart CGSL MAIN 7.02 : openssl Vulnerability (NS-SA-2026-0038)
The remote NewStart CGSL host, running version MAIN 7.02, has openssl packages installed that are affected by a vulnerability: - Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds read and write. Impact summary: This...
GHSA-JQCQ-XJH3-6G23 vulnerabilities
Vulnerabilities for packages: kots, bento-fips, teleport, telegraf, splunk-otel-collector-fips, grafana-alloy, grafana-alloy-fips, bento, steampipe, splunk-otel-collector...
GHSA-X6GF-MPR2-68H6 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, harbor, trillian-fips, vault-fips, gotrue-fips, teleport-operator-fips, src, gotrue, wavefront-collector-for-kubernetes, steampipe, splunk-otel-collector, grafana-alloy-fips, telegraf, trillian, migrate, splunk-otel-collector-fips, grafana-alloy,...
CVE-2026-4427 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, harbor, trillian-fips, vault-fips, gotrue-fips, teleport-operator-fips, src, gotrue, wavefront-collector-for-kubernetes, steampipe, splunk-otel-collector, grafana-alloy-fips, telegraf, trillian, migrate, splunk-otel-collector-fips, grafana-alloy,...
OESA-2026-1752 edk2 security update
EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: Writing large, newline-free data into a BIO chain using the line-buffering filter where the next BIO performs short writes can trigger a heap-based...
CVE-2026-33726 vulnerabilities
Vulnerabilities for packages: kubescape-server, hubble-fips, kubescape-server-fips, kubescape-operator-fips, kubescape-operator, hubble-ui, kubescape, hubble-ui-backend-fips, hubble...
CVE-2026-33870 vulnerabilities
Vulnerabilities for packages: celeborn, spark-fips, grpc-java-fips, elasticsearch-fips, apache-camel-karavan-devmode, camunda-zeebe, druid, spark, camunda, trino, wavefront-proxy, flyway, kserve-modelmesh, management-api-for-apache-cassandra-4.0, keycloak, zipkin, seata, localstack, apache-pulsar...
GHSA-PWQR-WMGM-9RR8 vulnerabilities
Vulnerabilities for packages: celeborn, spark-fips, grpc-java-fips, elasticsearch-fips, apache-camel-karavan-devmode, camunda-zeebe, druid, spark, camunda, trino, wavefront-proxy, flyway, kserve-modelmesh, management-api-for-apache-cassandra-4.0, keycloak, zipkin, seata, localstack, apache-pulsar...
GHSA-4VRQ-3VRQ-G6GG vulnerabilities
Vulnerabilities for packages: cloudbeat, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac, conftest, docker-fips, trivy, zot, docker-compose, kaniko, docker-compose-fips, conftest-fips, docker-cli-buildx, trivy-operator-fips, osv-scanner, kaniko-fips, kubescape-server,...
CVE-2026-33747 vulnerabilities
Vulnerabilities for packages: cloudbeat, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac, conftest, docker-fips, trivy, zot, docker-compose, kaniko, docker-compose-fips, conftest-fips, docker-cli-buildx, trivy-operator-fips, osv-scanner, kaniko-fips, kubescape-server,...
CVE-2026-33748 vulnerabilities
Vulnerabilities for packages: cloudbeat, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac, conftest, docker-fips, trivy, zot, docker-compose, kaniko, docker-compose-fips, conftest-fips, docker-cli-buildx, trivy-operator-fips, osv-scanner, kaniko-fips, kubescape-server,...
GHSA-4C29-8RGM-JVJJ vulnerabilities
Vulnerabilities for packages: cloudbeat, kubescape-server-fips, podman-fips, scorecard, skaffold-fips, guac, conftest, docker-fips, trivy, zot, docker-compose, kaniko, docker-compose-fips, conftest-fips, docker-cli-buildx, trivy-operator-fips, osv-scanner, kaniko-fips, kubescape-server,...
GHSA-4773-3JFM-QMX3 vulnerabilities
Vulnerabilities for packages: nacos, kayenta-fips, camunda-zeebe, conductor-fips, apache-nifi-registry, kayenta, kafbat-ui, nacos-docker, camunda, thingsboard, conductor, kafbat-ui-fips, apache-activemq-fips, apache-activemq...
CVE-2026-22737 vulnerabilities
Vulnerabilities for packages: nacos, kayenta-fips, camunda-zeebe, conductor-fips, apache-nifi-registry, kayenta, kafbat-ui, nacos-docker, camunda, thingsboard, conductor, kafbat-ui-fips, apache-activemq-fips, apache-activemq...
GHSA-6HCQ-HMM3-JJ3C vulnerabilities
Vulnerabilities for packages: nacos, kayenta-fips, camunda-zeebe, conductor-fips, apache-nifi-registry, kayenta, kafbat-ui, nacos-docker, camunda, thingsboard, conductor, kafbat-ui-fips, apache-activemq-fips, apache-activemq...
GHSA-CP57-FQ8G-QH6V libcrux has an Incorrect Check of Signer Response Norm During Verification
The ML-DSA verification algorithm as specified in FIPS 204, subsection 6.3 requires verifiers to check that the infinity norm of the deserialized signer response $z$ does not exceed $\gamma1 - \beta$ line 13 of Algorithm 8. The same check is required to be performed during signature generation...