GHSA-WC5V-R48V-G4VH vulnerabilities

Vulnerabilities for packages: cilium, cilium-fips...

GHSA-PFHR-PCCP-HWMH vulnerabilities

Vulnerabilities for packages: cilium, cilium-fips...

GHSA-CQQJ-4P63-RRMM vulnerabilities

Vulnerabilities for packages: druid...

GHSA-HQ4M-4948-64CC vulnerabilities

Vulnerabilities for packages: kyverno-fips...

GHSA-6P8V-8CQ8-V2R3 vulnerabilities

Vulnerabilities for packages: cilium, cilium-fips...

GHSA-24M5-R6HV-CCGP vulnerabilities

Vulnerabilities for packages: cilium, cilium-fips...

GHSA-F256-J965-7F32 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-GJ2R-PHWG-6RWW vulnerabilities

Vulnerabilities for packages: cilium, cilium-fips...

CVE-2018-16886 vulnerabilities

Vulnerabilities for packages: etcd, etcd-fips...

GHSA-H6XX-PMXH-3WGP vulnerabilities

Vulnerabilities for packages: etcd, etcd-fips...

CVE-2025-29786 vulnerabilities

Vulnerabilities for packages: eks-distro-fips, argo-rollouts, kubeflow-pipelines, opentelemetry-collector-contrib-fips, tempo, argo-cd-fips, nats, opentelemetry-collector-fips, grafana-alloy-fips, splunk-otel-collector, kargo, argo-cd, splunk-otel-collector-fips, argo-workflows-fips, keda,...

GHSA-VV39-3W5Q-974Q vulnerabilities

Vulnerabilities for packages: rancher-webhook-fips, rancher-agent...

AWS VDP: Amazon Kendra Intelligent Ranking Service Reporting "AWS Internal" for CloudTrail Events Generated from FIPS Endpoints

The AWS Kendra Intelligent Ranking service was found to incorrectly report the user-agent and network information as "AWS Internal" for four API endpoints that are FIPS endpoints. This issue can lead to the obscuring of request information that may be used to track down an adversary...

CVE-2025-25977 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, opensearch-dashboards...

nss bug fix and enhancement update

An update is available for nss. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Network Security Services NSS is a set of libraries designed to support the...

GHSA-QXP5-GWG8-XV66 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, kube-state-metrics, nerdctl, nodetaint, crossplane-provider-azure-authorization, kubevela, terraform-provider-grafana, trillian-fips, hugo-fips, kubernetes-csi-external-snapshotter, sftpgo-plugin-auth, kaniko-fips,...

CVE-2025-22870 vulnerabilities

Vulnerabilities for packages: kubernetes-dashboard-auth-fips, kube-state-metrics, nerdctl, nodetaint, crossplane-provider-azure-authorization, kubevela, terraform-provider-grafana, trillian-fips, hugo-fips, kubernetes-csi-external-snapshotter, sftpgo-plugin-auth, kaniko-fips,...

CVE-2025-25294 vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

GHSA-MF24-CHXH-HMVJ vulnerabilities

Vulnerabilities for packages: tigera-operator, tigera-operator-fips...

Linux Distros Unpatched Vulnerability : CVE-2024-9341

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in Go. When FIPS mode is enabled on a system, container runtimes may incorrectly handle certain file paths due to improper validation in the...