CVE-2025-68939 vulnerabilities

Vulnerabilities for packages: gitea-fips...

GHSA-263Q-5CV3-XQ9G vulnerabilities

Vulnerabilities for packages: gitea-fips...

CVE-2026-9678 vulnerabilities

Vulnerabilities for packages: langfuse, commercial-gitlab-rails-ee-fips, gemini-cli, code-server, kibana, langfuse-fips, renovate, vitess, py3-captum, pelias-api, commercial-gitlab-rails-ee...

CVE-2026-9697 vulnerabilities

Vulnerabilities for packages: langfuse, commercial-gitlab-rails-ee-fips, code-server, kibana, langfuse-fips, renovate, vitess, py3-captum, pelias-api, commercial-gitlab-rails-ee...

GHSA-PR7R-676H-XCF6 vulnerabilities

Vulnerabilities for packages: langfuse, commercial-gitlab-rails-ee-fips, gemini-cli, code-server, kibana, langfuse-fips, renovate, vitess, py3-captum, pelias-api, commercial-gitlab-rails-ee...

GHSA-VMH5-MC38-953G vulnerabilities

Vulnerabilities for packages: langfuse, commercial-gitlab-rails-ee-fips, code-server, kibana, langfuse-fips, renovate, vitess, py3-captum, pelias-api, commercial-gitlab-rails-ee...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: chartmuseum, grype-fips, spegel, helm-operator-fips, grype-db, ctop, kubevela, envoy-gateway-fips, linkerd2-fips, livekit-cli, kube-arangodb, rancher-agent, manifest-tool, kubescape-server-fips, steampipe, crossplane-fips, buildkitd, docker-compose, chainctl, packer,...

GHSA-CVXM-645Q-P574 vulnerabilities

Vulnerabilities for packages: chartmuseum, grype-fips, spegel, helm-operator-fips, grype-db, ctop, kubevela, envoy-gateway-fips, linkerd2-fips, livekit-cli, kube-arangodb, rancher-agent, manifest-tool, kubescape-server-fips, steampipe, crossplane-fips, buildkitd, docker-compose, chainctl, packer,...

GHSA-WJ3P-5H3X-C74Q vulnerabilities

Vulnerabilities for packages: backup-restore-operator, backup-restore-operator-fips...

GHSA-XHF5-7WJV-PQXP vulnerabilities

Vulnerabilities for packages: chartmuseum, grype-fips, spegel, helm-operator-fips, grype-db, ctop, kubevela, envoy-gateway-fips, linkerd2-fips, livekit-cli, kube-arangodb, rancher-agent, manifest-tool, kubescape-server-fips, steampipe, crossplane-fips, buildkitd, docker-compose, chainctl, packer,...

GHSA-5WRP-CWCJ-Q835 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, crossplane-provider-azure-orbital, podman-fips, k8ssandra-client-fips, opencost, prometheus-podman-exporter-fips, thanos-receive-controller-fips, crossplane-function-patch-and-transform, cass-operator-fips-no-pvc-delete,...

CVE-2026-41178 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver-fips, crossplane-provider-azure-orbital, podman-fips, k8ssandra-client-fips, opencost, prometheus-podman-exporter-fips, thanos-receive-controller-fips, crossplane-function-patch-and-transform, cass-operator-fips-no-pvc-delete,...

GHSA-JPCC-P29G-P8MQ vulnerabilities

Vulnerabilities for packages: chartmuseum, grype-fips, spegel, helm-operator-fips, grype-db, ctop, kubevela, envoy-gateway-fips, linkerd2-fips, livekit-cli, kube-arangodb, rancher-agent, manifest-tool, kubescape-server-fips, steampipe, crossplane-fips, buildkitd, docker-compose, chainctl, packer,...

GHSA-X96M-RH44-VGV8 vulnerabilities

Vulnerabilities for packages: neo4j, apache-activemq-fips, apache-jena-fuseki, apache-activemq...

CVE-2026-49268 vulnerabilities

Vulnerabilities for packages: neo4j, apache-activemq-fips, apache-jena-fuseki, apache-activemq...

AZL-91200 CVE-2026-55653 affecting package openssh 9.8p1-10

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

UBUNTU-CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653

A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...

CVE-2026-55653

CVE-2026-55653 affects OpenSSH and describes a double-free in the DH-GEX client path during FIPS known-group validation, allowing a malicious SSH server to terminate the client process and cause a Denial of Service. The issue is tied to processing attacker-controlled DH-GEX group parameters and i...