12 matches found
SUSE CVE-2026-55653
A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange DH-GEX client path. This occurs during FIPS Federal Information Processing Standards mode known-group validation when the client processes attacker-controlled DH-GEX...
CVE-2026-42295 vulnerabilities
Vulnerabilities for packages: argo-workflows-fips, kubeflow-pipelines-fips, argo-workflows, kubeflow-pipelines, kubeflow-pipelines-driver-fips...
CVE-2026-44487 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, gitlab-rails-ce-fips, opensearch-dashboards, wazuh-dashboard-fips, nextcloud-server, opensearch-dashboards-fips, wazuh-dashboard, arangodb, awx, kubeflow-katib...
GHSA-2VQW-3MP8-CGMX vulnerabilities
Vulnerabilities for packages: logstash-fips, gitlab-rails-ce, gitlab-rails-ce-fips, logstash, gitlab-cng...
GHSA-98QH-XJC8-98PQ vulnerabilities
Vulnerabilities for packages: flyway, kayenta, thingsboard, keycloak, nacos, ghidra, apache-hop, dependency-track, flyway-fips, nacos-docker, debezium, keycloak-fips, apache-hop-fips, camunda, hono, guacamole-client, sonarqube, geoserver, apicurio-registry, nuxeo, camunda-zeebe, kayenta-fips,...
GHSA-8Q2W-WR49-WHQJ vulnerabilities
Vulnerabilities for packages: traefik, traefik-fips...
GHSA-475M-QJ5V-HVQ3 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
GHSA-6V4W-CQRG-XV3G vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips...
EUVD-2025-35896
Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All API modules, Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All API modules allows Excessive Allocation. This vulnerability is associated wi...
CVE-2023-3089
A compliance problem was found in the Red Hat OpenShift Container Platform. Red Hat discovered that, when FIPS mode was enabled, not all of the cryptographic modules in use were FIPS-validated...
