ROOT-APP-NPM-CVE-2026-54288 CVE-2026-54288 in hono - Patched by Root

Root has patched CVE-2026-54288 in the hono package for Root:npm. Multiple fixed versions available...

ThinkPHP < 3.2.4 - Remote Code Execution

ThinkPHP before 3.2.4, as used in Open Source BMS v1.1.1 and other products, allows Remote Command Execution via the s parameter in index.php through the invokefunction functionality. id: CVE-2019-9082 info: name: ThinkPHP 3.2.4 - Remote Code Execution author: 0xanis severity: high description: |...

CLEANSTART-2026-MS81723 NumberInput

Security vulnerability affects the apache-nifi package. NumberInput...

CLEANSTART-2026-MR78444 UTF8DataInputJsonParser

Security vulnerability affects the apache-nifi package. UTF8DataInputJsonParser...

CLEANSTART-2026-GM47441 norm

Security vulnerability affects the kube-state-metrics package. A norm...

CLEANSTART-2026-DS09618 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...

CVE-2026-97481

In the Linux kernel, the following vulnerability has been resolved: serial: 8250: fix possible ISR soft lockup There are rare cases in which the host gets stuck in the ISR because it is flooded with messages during the startup phase. The reason for the soft lockup in the ISR is the missing FIFO...

CLEANSTART-2026-ZC76920 Tornado before 6

Security vulnerability affects the airflow-3 package. Tornado before 6...

CLEANSTART-2026-BL26881 Previously, resolving relative paths containing parent directory ('

Security vulnerability affects the fluent-operator package. Previously, resolving relative paths containing parent directory '...

PT-2026-105217

Security vulnerability affects the fluent-operator package. Previously, resolving relative paths containing parent directory '...

CLEANSTART-2026-BT23660 Browserslist is a configuration tool for sharing target browsers and Node

Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...

CLEANSTART-2026-NW83834 Browserslist is a configuration tool for sharing target browsers and Node

Security vulnerability affects the qdrant package. Browserslist is a configuration tool for sharing target browsers and Node...

ROOT-OS-DEBIAN-12-CVE-2026-42959 CVE-2026-42959 in unbound - Patched by Root

Root has patched CVE-2026-42959 in the unbound package for Root:Debian:12. Multiple fixed versions available...

Apache OFBiz 17.12.03 - Cross-Site Scripting

Apache OFBiz 17.12.03 contains cross-site scripting and unsafe deserialization vulnerabilities via an XML-RPC request. id: CVE-2020-9496 info: name: Apache OFBiz 17.12.03 - Cross-Site Scripting author: dwisiswant0 severity: medium description: Apache OFBiz 17.12.03 contains cross-site scripting a...

PT-2026-102973

Security vulnerability affects the caddy package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EU32419 It was identified that the LDAP client implementation in version 2

Security vulnerability affects the keycloak package. It was identified that the LDAP client implementation in version 2...

CLEANSTART-2026-SX37401 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the wildfly package. A vulnerability has been found in luben zstd-jni up to 1...

PT-2026-102424

Security vulnerability affects the knative-net-istio package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PD54373 Security fix for CVE-2018-14681 applied in: clamav 0.100.2-r0

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TN60432 Security fix for CVE-2020-3481 applied in: clamav 0.102.4-r0

Security vulnerability affects the clamav package. This issue is resolved in later releases. See references for vulnerability details...