GHSA-9X8Q-7H8H-WCW9 vulnerabilities

Vulnerabilities for packages: py3-vllm-cuda-12.4, apache-beam-python-3.13-sdk, apache-beam-python-3.11-sdk, lmcache-cuda-12.8, request-1276, apache-beam-python-3.12-sdk, mlflow-fips, py3.13-scanner-test-libraries-aiohttp, py3-vllm-cuda-12.9, airflow-core, authentik-fips, open-webui,...

GHSA-JQ35-7PRP-9V3F vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-placement-2025.1-fips, litellm, wazuh-manager-fips, superset-fips, airflow-postgres-fips, kserve, openstack-horizon-2025.1, openstack-glance-2025.2-fips, datadog-agent-fips, openstack-glance-2025.1-fips, openstack-horizon-2025....

CVE-2026-50011 vulnerabilities

Vulnerabilities for packages: tinkerpop, pinot-fips, celeborn, seata, hadoop-fips, management-api-for-apache-cassandra-5.0, thingsboard...

GHSA-5W86-C3RQ-VJJ7 vulnerabilities

Vulnerabilities for packages: tinkerpop, pinot-fips, celeborn, seata, hadoop-fips, management-api-for-apache-cassandra-5.0, thingsboard...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: pinot-fips, strimzi-kafka-operator-fips, celeborn, sonarqube, elasticsearch, neo4j, request-9047-keycloak-fips, docker-selenium, reposilite, logstash-fips, spark-kubernetes-operator, tinkerpop, keycloak, infinispan, opensearch, apache-pulsar-fips, druid, kafbat-ui,...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: pinot-fips, strimzi-kafka-operator-fips, celeborn, sonarqube, elasticsearch, neo4j, request-9047-keycloak-fips, docker-selenium, reposilite, logstash-fips, spark-kubernetes-operator, tinkerpop, keycloak, infinispan, opensearch, apache-pulsar-fips, druid, kafbat-ui,...

CVE-2026-48522 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-placement-2025.1-fips, litellm, wazuh-manager-fips, superset-fips, airflow-postgres-fips, kserve, openstack-horizon-2025.1, openstack-glance-2025.2-fips, datadog-agent-fips, openstack-glance-2025.1-fips, openstack-horizon-2025....

GHSA-993G-76C3-P5M4 vulnerabilities

Vulnerabilities for packages: openstack-glance-2026.1-fips, openstack-placement-2025.1-fips, litellm, wazuh-manager-fips, superset-fips, airflow-postgres-fips, kserve, openstack-horizon-2025.1, openstack-glance-2025.2-fips, datadog-agent-fips, openstack-glance-2025.1-fips, openstack-horizon-2025....

PT-2026-50149

Name of the Vulnerable Software and Affected Versions Deno versions prior to 2.8.1 Description The node:crypto.checkPrime and crypto.checkPrimeSync functions failed to perform Miller-Rabin rounds when the options.checks variable was left at its default value of 0. In this state, the software only...

SUSE CVE-2026-9076

Issue summary: When CMS password-based decryption RFC 3211 / PWRI key unwrap processes attacker-supplied CMS data, an attacker-chosen stream-mode KEK cipher can trigger a heap out-of-bounds read in kekunwrapkey. Impact summary: A heap buffer over-read may trigger a crash which leads to Denial of...

SUSE CVE-2026-42766

Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...

SUSE CVE-2026-42770

Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...

SUSE CVE-2026-45447

Issue summary: A specially crafted PKCS7 or S/MIME signed message could trigger a use-after-free during PKCS7 signature verification. Impact summary: A use-after-free may result in process crashes, heap corruption, or potentially remote code execution. When processing a PKCS7 or S/MIME signed...

CVE-2026-48710 vulnerabilities

Vulnerabilities for packages: wazuh-manager-fips, mlflow, nemo, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...

GHSA-86QP-5C8J-P5MR vulnerabilities

Vulnerabilities for packages: wazuh-manager-fips, mlflow, nemo, tritonserver-backend-vllm-cuda-12.9, wazuh-manager...

GHSA-8396-JFFM-QX4W vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

CVE-2026-48096 vulnerabilities

Vulnerabilities for packages: grafana, commercial-grafana, grafana-fips...

OESA-2026-2620 edk2 security update

EDK II is a modern, feature-rich, cross-platform firmware development environment for the UEFI and PI specifications. Security Fixes: Issue summary: An uncommon configuration of clients performing DANE TLSA-based server authentication, when paired with uncommon server DANE TLSA records, may resul...

GHSA-CXH2-4639-VMC5 vulnerabilities

Vulnerabilities for packages: kube-logging-operator-fips, kube-logging-operator...

GHSA-J5F8-GRM9-P9FC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, wazuh-dashboard, wazuh-dashboard-fips, arangodb, opensearch-dashboards, nextcloud-server, opensearch-dashboards-fips, kubeflow-katib, awx...