CLEANSTART-2026-HU47571 Security fixes in gradle 9.7.1-r0

Package gradle version 9.7.1-r0 fixes 3 vulnerabilities: CVE-2026-59889, CVE-2026-54515, CVE-2026-71497...

CLEANSTART-2026-RZ47271 Security fixes in elasticsearch 9.4.4-r5

Package elasticsearch version 9.4.4-r5 fixes 2 vulnerabilities: CVE-2026-71497, CVE-2026-45292...

CVE-2026-71497 vulnerabilities

Vulnerabilities for packages: gradle, copybara, wazuh-indexer, copybara-fips, opensearch-fips, elasticsearch-fips, spdx-tools-java, jbang, apache-hop-fips, scala, apache-tika-fips, metabase, apache-tika, conductor-fips, opensearch, apache-hop, elasticsearch, nextflow, conductor...

SUSE CVE-2026-71497

jsoup is a Java library for working with real-world HTML. From 1.14.3 until 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag name ending in a control character, causing the tag to acquire the parsing behavior of a different element. When a custom Safelist permits certain...