GHSA-526F-JXPJ-JMG2 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce-fips, gitlab-rails-ce...

CVE-2026-6860 vulnerabilities

Vulnerabilities for packages: apicurio-registry, spark-kubernetes-operator-fips, apicurio-registry-fips, keycloak, apache-pulsar, akhq, request-9047-keycloak-fips, spark-fips, wildfly, kafka-bridge, apache-camel-karavan-devmode, knative-kafka-broker, spark, knative-kafka-broker-fips,...

GHSA-3G76-F9XQ-8VP6 vulnerabilities

Vulnerabilities for packages: apicurio-registry, spark-kubernetes-operator-fips, apicurio-registry-fips, keycloak, apache-pulsar, akhq, request-9047-keycloak-fips, spark-fips, wildfly, kafka-bridge, apache-camel-karavan-devmode, knative-kafka-broker, spark, knative-kafka-broker-fips,...

GHSA-7PWC-H2J2-RJGJ vulnerabilities

Vulnerabilities for packages: automq-fips, wavefront-proxy, solr-fips, spark, solr, automq, nuxeo, zipkin...

CVE-2026-43869 vulnerabilities

Vulnerabilities for packages: automq-fips, wavefront-proxy, solr-fips, spark, solr, automq, nuxeo, zipkin...

GHSA-PMWQ-PJRM-6P5R vulnerabilities

Vulnerabilities for packages: buildkitd, docker-cli-buildx, policy-controller-fips, gitsign, slsa-verifier, tflint-fips, trivy-operator-fips, chainloop-control-plane, goreleaser, cosign-fips, chainctl-fips, gitlab-runner, kyverno-policy-reporter-plugins-kyverno, kyverno-fips, tekton-chains,...

CVE-2026-42880 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GHSA-3V3M-WC6V-X4X3 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, argocd-image-updater-fips...

GHSA-JFG9-48MV-9QGX vulnerabilities

Vulnerabilities for packages: pinot-fips, management-api-for-apache-cassandra-4.1, druid, apache-hop-fips, management-api-for-apache-cassandra-5.0, tez, seata, thingsboard, tinkerpop, trino, hono, hadoop-fips, apache-hop, pinot, celeborn, apache-activemq-artemis,...

CVE-2026-44248 vulnerabilities

Vulnerabilities for packages: pinot-fips, management-api-for-apache-cassandra-4.1, druid, apache-hop-fips, management-api-for-apache-cassandra-5.0, tez, seata, thingsboard, tinkerpop, trino, hono, hadoop-fips, apache-hop, pinot, celeborn, apache-activemq-artemis,...

CVE-2026-41635 vulnerabilities

Vulnerabilities for packages: jenkins, guacamole-client, apache-hop-fips, hadoop-fips, apache-hop...

GHSA-8297-V2RF-2P32 vulnerabilities

Vulnerabilities for packages: jenkins, guacamole-client, apache-hop-fips, hadoop-fips, apache-hop...

GHSA-FF6C-W6QF-7XQC vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips...

GHSA-V2FC-QM4H-8HQV vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, ruby3.4-rails, pact-broker-docker, kube-logging-operator, gitlab-rails-ce-fips, ruby3.3-rails, pact-broker-docker-fips, ruby3.2-rails, ruby4.0-rails...

GHSA-RGRR-P7GP-5XJ7 vulnerabilities

Vulnerabilities for packages: pinot-fips, management-api-for-apache-cassandra-4.1, druid, apache-hop-fips, management-api-for-apache-cassandra-5.0, tez, seata, thingsboard, tinkerpop, trino, hadoop-fips, apache-hop, pinot, celeborn, management-api-for-apache-cassandra-4.0...

CVE-2026-42586 vulnerabilities

Vulnerabilities for packages: pinot-fips, management-api-for-apache-cassandra-4.1, druid, apache-hop-fips, management-api-for-apache-cassandra-5.0, tez, seata, thingsboard, tinkerpop, trino, hadoop-fips, apache-hop, pinot, celeborn, management-api-for-apache-cassandra-4.0...

com.bigid:app-infrastructure (3.0.0.261-release), com.github.cafaudit:caf-audit-binding-elasticsearch (>=5.0.3-1321, <=5.0.4-1329) +82 more potentially affected by CVE-2026-8149 via org.bouncycastle:bc-fips (>=2.1.0, <=2.1.1)

org.bouncycastle:bc-fips MAVEN version =2.1.0, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =5.0.3-1321, =3.1.2-822, =3.1.2-822, =3.1.2-822, =3.1.2-822, =9.6.0, =4.10.0, =4.10.0, =4.10.0, =4.10.2 and more Source cves: CVE-2026-8149 Source advisory: SNYK:JAVA-ORGBOUNCYCASTLE-16624642https://vulne...

GHSA-RPMF-866Q-6P89 vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, wazuh-dashboard, langfuse, kibana, code-server...

CVE-2026-44240 vulnerabilities

Vulnerabilities for packages: langfuse-fips, wazuh-dashboard-fips, wazuh-dashboard, langfuse, kibana, code-server...

CVE-2026-42561 vulnerabilities

Vulnerabilities for packages: keep-fips, wazuh-manager, semgrep, reflex, wazuh-manager-fips, airflow-core, lmcache-cuda-12.8, airflow, synapse, litellm, keep...