GHSA-PXH5-6RRC-8RJV vulnerabilities

Vulnerabilities for packages: opentofu, opentofu-fips...

Important: containerd

Issue Overview: An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users. Rejected channels are now properly removed from the connection's internal state a...

Unbreakable Enterprise kernel security update

6.12.0-203.76.7.3 - arm64: errata: Mitigate TLBI errata on various Arm CPUs Mark Rutland Orabug: 39017589 CVE-2025-10263 - arm64: tlb: Add ARM64WORKAROUNDREPEATTLBISYNC Mark Rutland Orabug: 39017589 - arm64: tlb: allow XZR argument to TLBI ops Mark Rutland Orabug: 39017589 - arm64: cputype: Add...

GHSA-C27G-Q93R-2CWF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, langfuse-fips, arangodb, langfuse...

CVE-2024-52011 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, langfuse-fips, arangodb, langfuse...

CVE-2026-0259

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary files. This vulnerability affects WF-500 and WF-500-B appliances running in the default non-FIPS configuration mode. The...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: dkron, traefik, coredns, teleport-operator-fips, prometheus-blackbox-exporter-fips, kubo, spegel-fips, q, syncthing-fips, kargo, mediamtx, kubo-fips, kubernetes-dns-node-cache, kubedock, kube-metrics-adapter, kyverno-policy-reporter-ui, kubedock-fips,...

GHSA-W2Q5-6Q6X-X959 vulnerabilities

Vulnerabilities for packages: aws-otel-collector-fips, teleport-operator-fips, mapotf-fips, kubedock, kyverno-policy-reporter-kyverno-plugin-fips, crossplane-provider-aws-route53recoverycontrolconfig, gomplate-fips, k6-operator, kubescape, kubernetes-event-exporter-fips, azuredisk-csi-fips,...

GHSA-298W-VVM4-WW55 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, opensearch-dashboards-fips, opensearch-dashboards, wazuh-dashboard-fips...

go-toolset:ol8 security update

delve 1.25.2-1.0.1 golang 1.25.9-1.0.1 - EXPERIMENTAL: Introduce fipsnoenforceems GODEBUG var - Backported from OL9u7 - Resolves: OLDIS-53586...

CVE-2026-6713 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng, gitlab-cng-fips, gitlab-runner-fips...

CVE-2026-8716 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng, gitlab-cng-fips, gitlab-runner-fips...

GHSA-R38R-HVG8-XQHF vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng, gitlab-cng-fips, gitlab-runner-fips...

GHSA-WGQ9-QP63-G8J3 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng, gitlab-cng-fips, gitlab-runner-fips...

GHSA-5P55-QCQV-882W vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng, gitlab-cng-fips, gitlab-runner-fips...

CVE-2026-1402 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce, gitlab-runner, gitlab-cng, gitlab-cng-fips, gitlab-runner-fips...

CVE-2026-39834 vulnerabilities

Vulnerabilities for packages: istio, teleport-operator-fips, mapotf-fips, argo-cd, crossplane-provider-aws-lexmodels, crossplane-provider-azure-servicenetworking, containerd, crossplane-provider-aws-route53recoverycontrolconfig, gomplate-fips, kubescape, consul-fips, commercial-grafana,...

GHSA-Q8MJ-M7CP-5Q26 vulnerabilities

Vulnerabilities for packages: argo-workflows, langfuse, opensearch-dashboards-fips, py3-captum, prism, py3-jupyterlab, gitlab-rails-ce, json-server, pelias-api, wazuh-dashboard, sqlpad, tensorflow-gpu-jupyter, arangodb, opensearch-dashboards, jupyter-base-notebook, commercial-gitlab-rails-ee-fips...

CVE-2026-8723 vulnerabilities

Vulnerabilities for packages: argo-workflows, langfuse, opensearch-dashboards-fips, py3-captum, prism, py3-jupyterlab, gitlab-rails-ce, json-server, pelias-api, wazuh-dashboard, sqlpad, tensorflow-gpu-jupyter, arangodb, opensearch-dashboards, jupyter-base-notebook, commercial-gitlab-rails-ee-fips...

CVE-2026-42151 vulnerabilities

Vulnerabilities for packages: istio, loki-fips, fluent-bit-plugin-loki, aws-otel-collector-fips, minio-operator, ld-relay, prometheus, cloud-sql-proxy-fips, trillian-fips, trillian, metrics-server, tempo-fips, amazon-cloudwatch-agent-operator, minio-operator-fips, loki, datadog-agent-fips,...