SUSE CVE-2026-71884

In Bouncy Castle for Java LTS before 2.73.13, the native one-shot CTR packet cipher did not check that the requested input length fitted the counter space the IV left. In CTR mode the IV and the block counter share one 16-byte block, so an IV of 13 to 15 bytes leaves a counter of only 1 to 3 byte...

CLEANSTART-2026-YJ89488 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-CX61220 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-PK52336 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-LM18724 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-VT81725 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-DU73207 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-EA15585 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-IA44862 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-QX36211 JLine is a Java library for handling console input

Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...

CLEANSTART-2026-JU97425 jackson-databind's deserializer for java

CVE-2026-19032 affects multiple packages. jackson-databind's deserializer for java. See references for individual vulnerability details...

CLEANSTART-2026-HV53222 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

Security vulnerability affects the apache-nifi package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics...

CLEANSTART-2026-XK50947 Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly

Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...

PT-2026-117773

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

PT-2026-117772

Security vulnerability affects the apache-nifi package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics...

PT-2026-117831

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

PT-2026-117740

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

PT-2026-117794

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

PT-2026-117730

Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...

Linux Distros Unpatched Vulnerability : CVE-2026-108104

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when...