8020 matches found
CVE-2026-45536 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, flyway, cassandra, keycloak, wildfly, spark-fips, neo4j, kayenta-fips, seata, celeborn, akhq, kserve-modelmesh, kafbat-ui, s3proxy, flyway-fips, solr, spark-kubernetes-operator-fips, apache-pulsar-fips, apache-nifi, apache-hop-fips, pinot,...
GHSA-W573-9FFJ-6FF9 vulnerabilities
Vulnerabilities for packages: request-9047-keycloak-fips, flyway, cassandra, keycloak, wildfly, spark-fips, neo4j, kayenta-fips, seata, celeborn, akhq, kserve-modelmesh, kafbat-ui, s3proxy, flyway-fips, solr, spark-kubernetes-operator-fips, apache-pulsar-fips, apache-nifi, apache-hop-fips, pinot,...
GHSA-X4GW-5CX5-PGMH vulnerabilities
Vulnerabilities for packages: elasticsearch-fips, cassandra, keycloak, wildfly, seata, celeborn, docker-selenium, spark-kubernetes-operator-fips, apache-pulsar-fips, apache-nifi, apache-hop-fips, sonarqube, druid, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, trino, hono,...
CVE-2026-44249 vulnerabilities
Vulnerabilities for packages: elasticsearch-fips, cassandra, keycloak, wildfly, seata, celeborn, docker-selenium, spark-kubernetes-operator-fips, apache-pulsar-fips, apache-nifi, apache-hop-fips, sonarqube, druid, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, trino, hono,...
CVE-2026-45416 vulnerabilities
Vulnerabilities for packages: elasticsearch-fips, cassandra, keycloak, wildfly, seata, celeborn, docker-selenium, spark-kubernetes-operator-fips, apache-pulsar-fips, apache-nifi, apache-hop-fips, sonarqube, druid, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, trino, hono,...
GHSA-3QP7-7MW8-WX86 vulnerabilities
Vulnerabilities for packages: elasticsearch-fips, cassandra, keycloak, wildfly, seata, celeborn, docker-selenium, spark-kubernetes-operator-fips, apache-pulsar-fips, apache-nifi, apache-hop-fips, sonarqube, druid, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, trino, hono,...
GHSA-QP9X-WP8F-QGJJ vulnerabilities
Vulnerabilities for packages: datadog-agent-fips, datadog-agent...
CVE-2026-44250 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, seata, pinot-fips, management-api-for-apache-cassandra-4.1, apache-hop-fips, tinkerpop, trino, pinot, apache-hop, hadoop-fips, tez, celeborn, management-api-for-apache-cassandra-4.0...
GHSA-6GHJ-FRRJ-JJJ3 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, seata, pinot-fips, management-api-for-apache-cassandra-4.1, apache-hop-fips, tinkerpop, trino, pinot, apache-hop, hadoop-fips, tez, celeborn, management-api-for-apache-cassandra-4.0...
CVE-2026-44890 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, seata, pinot-fips, management-api-for-apache-cassandra-4.1, apache-hop-fips, tinkerpop, trino, pinot, apache-hop, hadoop-fips, tez, celeborn, management-api-for-apache-cassandra-4.0...
GHSA-3244-J874-RHC2 vulnerabilities
Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-5.0, seata, pinot-fips, management-api-for-apache-cassandra-4.1, apache-hop-fips, tinkerpop, trino, pinot, apache-hop, hadoop-fips, tez, celeborn, management-api-for-apache-cassandra-4.0...
PT-2026-47832
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A remote peer can cause unbounded memory allocation leading to a Denial of Service and abnormal termination of an application acting as a QUIC client or server. This occurs when a malicious...
FFC-DH Peer Validation Uses Attacker-Supplied q
Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim’s p and g parameters, a forged q = r a small prime factor of the cofacto...
PT-2026-47834
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference occurs in the OpenSSL QUIC server when receiving a QUIC initial packet containing an invalid or expired token. This issue is triggered specifically when address...
CVE-2026-42770
Issue summary: When EVPPKEYderivesetpeer is called with a DHX X9.42 peer key, the peer key is not properly checked for the subgroup membership. Impact summary: A malicious peer which presents an X9.42 key carrying the victim's p and g parameters, a forged q = r a small prime factor of the cofacto...
PT-2026-47840
Name of the Vulnerable Software and Affected Versions OpenSSL FIPS modules versions 3.0, 3.4, 3.5, 3.6, and 4.0 Description When the EVP PKEY derive set peer function is called with a DHX X9.42 peer key, the software fails to properly verify subgroup membership. Specifically, the check Y^q ≡ 1 mo...
PT-2026-47836
Name of the Vulnerable Software and Affected Versions OpenSSL affected versions not specified Description A NULL pointer dereference can occur during the decryption of password-encrypted Cryptographic Message Syntax CMS messages. The issue arises because the OpenSSL CMS implementation dereference...
CVE-2026-42766
Issue summary: A specially crafted password-encrypted CMS message can trigger a NULL pointer dereference during CMS decryption. Impact summary: This NULL pointer dereference leads to an application crash and a Denial of Service. The CMS PasswordRecipientInfo.keyDerivationAlgorithm field is define...