CLEANSTART-2026-QX36211 JLine is a Java library for handling console input

Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...

CLEANSTART-2026-AD70544 JLine is a Java library for handling console input

Security vulnerability affects the apache-nifi package. JLine is a Java library for handling console input...

CLEANSTART-2026-VT81725 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-DU73207 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-JU97425 jackson-databind's deserializer for java

CVE-2026-19032 affects multiple packages. jackson-databind's deserializer for java. See references for individual vulnerability details...

CLEANSTART-2026-IW75914 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

CLEANSTART-2026-ZC88513 NumberInput

CVE-2026-89407 affects multiple packages. NumberInput. See references for individual vulnerability details...

CLEANSTART-2026-CF02971 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

Security vulnerability affects the argo-cd package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...

CLEANSTART-2026-IZ97021 Werkzeug is a comprehensive WSGI web application library

CVE-2026-102598 affects multiple packages. Werkzeug is a comprehensive WSGI web application library. See references for individual vulnerability details...

CLEANSTART-2026-RY75386 Mako is a template library written in Python

CVE-2026-102991 affects multiple packages. Mako is a template library written in Python. See references for individual vulnerability details...

CLEANSTART-2026-IM25560 Security fix for GHSA-3hv7-mjh2-fv65 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9

GHSA-3hv7-mjh2-fv65 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BK97819 urllib3 is an HTTP client library for Python

CVE-2026-97688 affects multiple packages. urllib3 is an HTTP client library for Python. See references for individual vulnerability details...

CLEANSTART-2026-EH65259 urllib3 is an HTTP client library for Python

CVE-2026-97689 affects multiple packages. urllib3 is an HTTP client library for Python. See references for individual vulnerability details...

CLEANSTART-2026-FR34222 Security fix for GHSA-wwv5-g3v4-889x applied in: jupyterhub-k8s-hub 6.0.0-r1

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TZ94047 Tornado is a Python web framework and asynchronous networking library

Security vulnerability affects the jupyterhub-k8s-hub package. Tornado is a Python web framework and asynchronous networking library...

CLEANSTART-2026-PK02835 Vim is an open source, command line text editor

Security vulnerability affects the keycloak package. Vim is an open source, command line text editor...

CLEANSTART-2026-NB81003 Security fix for GHSA-r7wm-3cxj-wff9 applied in: apache-nifi 2.5.0-r0

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VJ66096 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-QK55456 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-AE51081 Uncontrolled Resource Consumption vulnerability in the HTTP/1

Security vulnerability affects the apache-nifi package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...