CLEANSTART-2026-KF30791 In Bouncy Castle for Java before 1

CVE-2026-71891 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-HE64068 In Bouncy Castle for Java before 1

CVE-2026-71892 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-NB89107 In Bouncy Castle for Java before 1

CVE-2026-18036 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-EM43415 In Bouncy Castle for Java before 1

CVE-2026-71888 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-RU76121 In Bouncy Castle for Java before 1

CVE-2026-85515 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-FE65941 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106453 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-YW37682 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106449 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-OZ05879 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106451 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-GT24966 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106452 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-XJ09918 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106450 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-CZ82044 jackson-databind's deserializer for java

CVE-2026-19032 affects multiple packages. jackson-databind's deserializer for java. See references for individual vulnerability details...

CLEANSTART-2026-UF96774 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the kafka package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-EN44130 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API

CVE-2026-45292 affects multiple packages. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. See references for individual vulnerability details...

CLEANSTART-2026-GN57450 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings

CVE-2026-43871 affects multiple packages. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings. See references for individual vulnerability details...

CLEANSTART-2026-MH58992 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-RU43979 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-GD87503 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-RP19895 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4

Security vulnerability affects the elasticsearch package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...

CVE-2026-97666: Use of Externally-Controlled Input to Select Classes or Code

Sonatype Nexus Repository 3 allows an unauthenticated remote attacker to supply attacker-controlled input to a Java class loading call through an ExtDirect endpoint. This allows the attacker to learn whether specific classes are present in the application. The issue does not by itself allow code...

PT-2026-122810

Security vulnerability affects the elasticsearch package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...