CLEANSTART-2026-QB24702 Security fix for CVE-2025-5115 applied in: schema-registry 7.7.8-r0, schema-registry 7.9.6-r0, solr 9.8.1-r1

CVE-2025-5115 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VE14203 Security fix for CVE-2026-42778 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0

CVE-2026-42778 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NP40407 Security fix for CVE-2026-41635 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0

CVE-2026-41635 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TW68180 Security fix for CVE-2026-41409 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0

CVE-2026-41409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95650

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description pg partman is a PostgreSQL extension used for managing partitioned tables by time or ID. The functions drop partition id and drop partition time utilize part config.retention schema as the target...

PT-2026-95377

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description The polyglot script sandbox contains an incomplete deny-list within com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED. While java.util.ResourceBundle is listed, the filter uses exact equalit...

CVE-2026-92756

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756 Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756 Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

EUVD-2026-82377

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756

This vulnerability affects the MongoDB Entity Framework Core Provider . Applications that combine independent encryption settings with the provider's own encryption settings may silently lose TLS and schema-map settings , causing protected fields to be stored unencrypted in the database. The flaw...

CVE-2026-92756 Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

com.squareup.wire:wire-grpc-client (5.0.0-alpha03), com.squareup.wire:wire-schema (5.0.0-alpha03) +1 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (5.0.0-alpha03)

com.squareup.wire:wire-runtime MAVEN version 5.0.0-alpha03 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 5.0.0-alpha03 - com.squareup.wire:wire-schema...

com.squareup.wire:wire-compiler (2.0.0-beta1), com.squareup.wire:wire-gson-support (2.0.0-beta1) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta1)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta1 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta1 - com.squareup.wire:wire-gson-support 2.0.0-beta1...

com.squareup.wire:wire-compiler (2.0.0-beta3), com.squareup.wire:wire-gson-support (2.0.0-beta3) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta3)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta3 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta3 - com.squareup.wire:wire-gson-support 2.0.0-beta3...

com.squareup.wire:wire-compiler (2.0.0-beta4), com.squareup.wire:wire-gson-support (2.0.0-beta4) +2 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta4)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta4 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta4 - com.squareup.wire:wire-gson-support 2.0.0-beta4...

com.squareup.wire:wire-compiler (2.0.0-beta7), com.squareup.wire:wire-gson-support (2.0.0-beta7) +3 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta7)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta7 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta7 - com.squareup.wire:wire-gson-support 2.0.0-beta7...

com.squareup.wire:wire-compiler (2.0.0-beta9), com.squareup.wire:wire-gson-support (2.0.0-beta9) +4 more potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (2.0.0-beta9)

com.squareup.wire:wire-runtime MAVEN version 2.0.0-beta9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-compiler 2.0.0-beta9 - com.squareup.wire:wire-gson-support 2.0.0-beta9...

com.squareup.wire:wire-grpc-client (4.0.0-alpha.9), com.squareup.wire:wire-schema (4.0.0-alpha.9) potentially affected by CVE-2026-63126 via com.squareup.wire:wire-runtime (4.0.0-alpha.9)

com.squareup.wire:wire-runtime MAVEN version 4.0.0-alpha.9 is affected by a known vulnerability. The following packages have a transitive dependency on com.squareup.wire:wire-runtime and may be impacted: - com.squareup.wire:wire-grpc-client 4.0.0-alpha.9 - com.squareup.wire:wire-schema...