GHSA-W487-9R9P-6P96 vulnerabilities

Vulnerabilities for packages: gitlab-pages-fips, gitlab-runner, gitlab-runner-fips, gitlab-rails-ce-fips...

golang security update

1.25.7-1 - Update to Go 1.25.7 fips-1 - Resolves: RHEL-146476...

Ubuntu: Security Advisory (USN-7988-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

go-toolset:ol8 security and bug fix update

go-toolset 1.11.13-1 - Bump version to 1.11.13 - Related: rhbz1743204 - Related: rhbz1743206 golang 1.11.13-2 - Improve error message when using non-FIPS API in FIPS mode. - Fixes CVE-2019-9512. - Fixes CVE-2019-9514. - Resolves: rhbz1745711 - Resolves: rhbz1745705 1.11.6-3 - Updates to be less...

GHSA-V34V-RQ6J-CJ6P vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, librechat, kibana...

CVE-2026-25528 vulnerabilities

Vulnerabilities for packages: langfuse-fips, langfuse, librechat, kibana...

CLEANSTART-2026-PR84319 Security fixes for GHSA-2GH3-RMM4-6RQ5, GHSA-R6V5-FH4H-64XC, GHSA-RHFX-M35P-FF5J, GHSA-XWFJ-JGWM-7WP5 applied in versions: 1.27.5-r1, 1.27.6-r0

Multiple security vulnerabilities affect the ztunnel-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TR92727 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Multiple security vulnerabilities affect the prometheus-operator-fips package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should ha...

CLEANSTART-2026-GV85693 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-QI35149 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

Multiple security vulnerabilities affect the cloudnative-pg-fips package. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-FI29887 During the TLS 1

Multiple security vulnerabilities affect the kyverno-fips package. During the TLS 1. See references for individual vulnerability details...

CVE-2026-26014 vulnerabilities

Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, kubo, rke2-runtime, kubo-fips, telegraf, livekit-server-fips, spegel, spegel-fips, livekit-server, ipfs-cluster-fips, livekit-egress, k3s, livekit-cli...

GHSA-9F3F-WV7R-QC8R vulnerabilities

Vulnerabilities for packages: ipfs-cluster, rke2-runtime-fips, kubo, rke2-runtime, kubo-fips, telegraf, livekit-server-fips, spegel, spegel-fips, livekit-server, ipfs-cluster-fips, livekit-egress, k3s, livekit-cli...

GHSA-JQ9F-GM9W-RWM9 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

CVE-2026-24851 vulnerabilities

Vulnerabilities for packages: grafana, grafana-fips...

Ubuntu: Security Advisory (USN-7988-4)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-26007 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, dask-kubernetes, k8s-sidecar, superset, py3-cassandra-medusa, label-studio, airflow, apache-beam-python-3.11-sdk, open-webui, gitlab-cng-fips, localstack, awx, prefect, barman, mitmproxy, semgrep, kserve, in-toto, datadog-agent, ggshield,...

GHSA-R6PH-V2QM-Q3C2 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, dask-kubernetes, k8s-sidecar, superset, py3-cassandra-medusa, label-studio, airflow, apache-beam-python-3.11-sdk, open-webui, gitlab-cng-fips, localstack, awx, prefect, barman, mitmproxy, semgrep, kserve, in-toto, datadog-agent, ggshield,...

CVE-2026-25639 vulnerabilities

Vulnerabilities for packages: saf, lerna, prism, kubeflow-centraldashboard, langfuse, gitlab-rails-ce, jitsucom-jitsu, kubeflow-katib, langfuse-fips, nextcloud-server, opensearch-dashboards, opensearch-dashboards-fips, librechat, redisinsight, gitlab-rails-ce-fips, kibana, awx...

GHSA-43FC-JF86-J433 vulnerabilities

Vulnerabilities for packages: saf, lerna, prism, kubeflow-centraldashboard, langfuse, gitlab-rails-ce, jitsucom-jitsu, kubeflow-katib, langfuse-fips, nextcloud-server, opensearch-dashboards, opensearch-dashboards-fips, librechat, redisinsight, gitlab-rails-ce-fips, kibana, awx...