CLEANSTART-2026-XK50947 Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly

Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...

CLEANSTART-2026-VV78172 Apache NiFi 1

Security vulnerability affects the apache-nifi package. Apache NiFi 1...

CLEANSTART-2026-BT04597 Apache MINA's AbstractIoBuffer

Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...

CLEANSTART-2026-SN03087 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

CLEANSTART-2026-MN49716 In Eclipse Jetty, versions 12

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...

CLEANSTART-2026-DA06561 In Eclipse Jetty, versions <=9

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions =9...

CLEANSTART-2026-AU34344 In jose4j before 0

Security vulnerability affects the apache-nifi package. In jose4j before 0...

CLEANSTART-2026-IY45098 Security fix for GHSA-hrxh-6v49-42gf applied in: loki 3.6.11-r0

Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KL35365 Prometheus is an open-source monitoring system and time series database

CVE-2026-42151 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-FB95411 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the cortex package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-TZ27062 Prometheus is an open-source monitoring system and time series database

CVE-2026-44903 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

CLEANSTART-2026-XX38333 Prometheus is an open-source monitoring system and time series database

CVE-2026-42154 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...

OPENSUSE-SU-2026:12105-1 xwayland-24.1.13-2.1 on GA media

These are all security issues fixed in the xwayland-24.1.13-2.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12102-1 iscsiuio-0.7.8.8-114.1 on GA media

These are all security issues fixed in the iscsiuio-0.7.8.8-114.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12099-1 cyrus-sasl-2.1.28-13.1 on GA media

These are all security issues fixed in the cyrus-sasl-2.1.28-13.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2026:12097-1 MozillaFirefox-157.0.1-1.1 on GA media

These are all security issues fixed in the MozillaFirefox-157.0.1-1.1 package on the GA media of openSUSE Tumbleweed...

ca.derekellis.kgtfs:gtfs-db (0.5.2), ca.derekellis.kgtfs:raptor (0.5.2) +447 more potentially affected by CVE-2026-108474 via org.jetbrains.exposed:exposed-core (>=1.1.0, <=1.5.0)

org.jetbrains.exposed:exposed-core MAVEN version =1.1.0, =1.0.0, =1.1.6, =2.3.3, =2.3.6, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =2.3.3, =0.1.0, =0.2.0 and more Source cves: CVE-2026-108474 Source advisory: MEND:CVE-2026-108474...

CLSA-2026-1791584881 TuxCare security update for shell-quote (1 CVE)

TuxCare rebuilt shell-quote to address 1 CVE. Fixed in 1.8.3-tuxcare.2...

AZL-107973 CVE-2026-108267 affecting package gcc 13.2.0-7

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...

AZL-107985 CVE-2026-108267 affecting package golang 1.27.1-1

Privasys Go is a maintained fork of the Go programming language that adds RA-TLS support to crypto/tls. Prior to privasys-v0.5.1-go1.26.5, challenge-mode RA-TLS certificates bound quote ReportData to the certificate public key and client nonce but not to the active TLS session. An attacker who...