CLEANSTART-2026-RY75386 Mako is a template library written in Python

CVE-2026-102991 affects multiple packages. Mako is a template library written in Python. See references for individual vulnerability details...

CLEANSTART-2026-IM25560 Security fix for GHSA-3hv7-mjh2-fv65 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9

GHSA-3hv7-mjh2-fv65 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IZ97021 Werkzeug is a comprehensive WSGI web application library

CVE-2026-102598 affects multiple packages. Werkzeug is a comprehensive WSGI web application library. See references for individual vulnerability details...

CLEANSTART-2026-FR34222 Security fix for GHSA-wwv5-g3v4-889x applied in: jupyterhub-k8s-hub 6.0.0-r1

Security vulnerability affects the jupyterhub-k8s-hub package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TZ94047 Tornado is a Python web framework and asynchronous networking library

Security vulnerability affects the jupyterhub-k8s-hub package. Tornado is a Python web framework and asynchronous networking library...

CLEANSTART-2026-PK02835 Vim is an open source, command line text editor

Security vulnerability affects the keycloak package. Vim is an open source, command line text editor...

CLEANSTART-2026-NB81003 Security fix for GHSA-r7wm-3cxj-wff9 applied in: apache-nifi 2.5.0-r0

Security vulnerability affects the apache-nifi package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VJ66096 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-AE51081 Uncontrolled Resource Consumption vulnerability in the HTTP/1

Security vulnerability affects the apache-nifi package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...

CLEANSTART-2026-QK55456 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the apache-nifi package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-BN04389 fix for CVE-2026-41409 was not applied to the 2

Security vulnerability affects the apache-nifi package. The fix for CVE-2026-41409 was not applied to the 2...

CLEANSTART-2026-BT04597 Apache MINA's AbstractIoBuffer

Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...

CLEANSTART-2026-XK50947 Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly

Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...

CLEANSTART-2026-VV78172 Apache NiFi 1

Security vulnerability affects the apache-nifi package. Apache NiFi 1...

CLEANSTART-2026-MN49716 In Eclipse Jetty, versions 12

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...

CLEANSTART-2026-SN03087 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

CLEANSTART-2026-DA06561 In Eclipse Jetty, versions <=9

Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions =9...

CLEANSTART-2026-AU34344 In jose4j before 0

Security vulnerability affects the apache-nifi package. In jose4j before 0...

CLEANSTART-2026-IY45098 Security fix for GHSA-hrxh-6v49-42gf applied in: loki 3.6.11-r0

Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KL35365 Prometheus is an open-source monitoring system and time series database

CVE-2026-42151 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...