CLEANSTART-2026-DV04077 go-git is a highly extensible git implementation library written in pure Go

Multiple security vulnerabilities affect the argo-workflows-fips package. go-git is a highly extensible git implementation library written in pure Go. See references for individual vulnerability details...

GHSA-M7JM-9GC2-MPF2 vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, tileserver-gl, tileserver-gl-fips, langfuse, prism, saf, dbgate-fips, renovate, dbgate...

CVE-2026-25896 vulnerabilities

Vulnerabilities for packages: kibana, langfuse-fips, tileserver-gl, tileserver-gl-fips, langfuse, prism, saf, dbgate-fips, renovate, dbgate...

CLEANSTART-2026-CL79805 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-J5W8-Q4QC-RX2X applied in versions: 0.8.4-r0

Multiple security vulnerabilities affect the k8ssandra-client-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-25793 vulnerabilities

Vulnerabilities for packages: step-ca, caddy-fips, step-issuer-fips, step-ca-fips, step-fips, step, step-issuer, caddy...

GHSA-69X3-G4R3-P962 vulnerabilities

Vulnerabilities for packages: step-ca, caddy-fips, step-issuer-fips, step-ca-fips, step-fips, step, step-issuer, caddy...

GHSA-FJF4-6F34-W64Q vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2026-2733 vulnerabilities

Vulnerabilities for packages: keycloak-fips...

CVE-2026-24834 vulnerabilities

Vulnerabilities for packages: azurefile-csi, azurefile-csi-fips...

GHSA-WWJ6-VGHV-5P64 vulnerabilities

Vulnerabilities for packages: azurefile-csi, azurefile-csi-fips...

CLSA-2026-1771579201 Update of java-11-openjdk

Fix the FIPS patch...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: terragrunt-fips, openfga, kine, sftpgo-plugin-eventstore, beats, step-fips, timestamp-authority-fips, flux-kustomize-controller, temporal-server, agentbeat-fips, kyverno-policy-reporter, sops-fips, crossplane-provider-sql, seaweedfs, certificate-transparency-fips,...

CLEANSTART-2026-OJ16660 Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-434X-W66G-QW3R, GHSA-R6V5-FH4H-64XC, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.28.2-r0, 1.28.4-r0

Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NN87556 Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-434X-W66G-QW3R, GHSA-R6V5-FH4H-64XC, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.28.2-r0, 1.29.0-r0

Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN30288 Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-434X-W66G-QW3R, GHSA-R6V5-FH4H-64XC, GHSA-RHFX-M35P-FF5J, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.27.5-r1, 1.27.6-r0

Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YN08405 Security fixes for GHSA-F6X5-JH6R-WRFV, GHSA-J5W8-Q4QC-RX2X applied in versions: 7.1.1-r7

Multiple security vulnerabilities affect the minio-operator-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-848J-6MX2-7J84 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, opensearch-dashboards...

CVE-2025-14505 vulnerabilities

Vulnerabilities for packages: librechat, opensearch-dashboards-fips, opensearch-dashboards...

Security update for openCryptoki

This update for openCryptoki fixes the following issues: Security fixes: CVE-2026-23893: Fixed privilege escalation or data exposure via symlink following bsc1257116 Other fixes: Fixed FIPS mode bsc1248002 Patch Instructions: To install this SUSE update use the SUSE recommended installation metho...

Security Bulletin: IBM webMethods BPM is vulnerable to a denial of service due to bc-fips

Summary IBM webMethods BPM uses bc-fips which is pulled in by webMethods Integration Server core for FIPS-compliant cryptographic operations. The BPM Process Engine relies on IS infrastructure for security but doesn't directly use Bouncy Castle APIs. Vulnerability Details CVEID:CVE-2025-8885...