CLEANSTART-2026-AW54675 Jetty is a Java based web server and servlet engine

Security vulnerability affects the apache-hive package. Jetty is a Java based web server and servlet engine...

CLEANSTART-2026-LU07367 SnakeYaml's Constructor() class does not restrict types which can be instantiated during deserialization

Security vulnerability affects the apache-hive package. SnakeYaml's Constructor class does not restrict types which can be instantiated during deserialization...

CLEANSTART-2026-XA09003 There exists a security vulnerability in Jetty's ThreadLimitHandler

Security vulnerability affects the apache-hive package. There exists a security vulnerability in Jetty's ThreadLimitHandler...

CLEANSTART-2026-RM27801 In Eclipse Jetty versions 1

Security vulnerability affects the apache-hive package. In Eclipse Jetty versions 1...

CLEANSTART-2026-BW99256 Security fix for CVE-2021-28165 applied in: apache-hive 3.1.3-r3

Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NM72661 Security fix for GHSA-673j-qm5f-xpv8 applied in: apache-hive 3.1.3-r3

Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CB36815 Security fix for GHSA-wmmp-3585-3rmp applied in: langfuse 3.225.9-r0

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EH14078 ### Summary `qs

CVE-2026-82417 affects multiple packages. Summary qs. See references for individual vulnerability details...

CLEANSTART-2026-ZC19840 Security fix for GHSA-cc9r-2j5m-2m83 applied in: langfuse 3.225.9-r0

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-EF09079 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

CVE-2026-101912 affects multiple packages. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. See references for individual vulnerability details...

CLEANSTART-2026-FP38889 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

CVE-2026-101911 affects multiple packages. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. See references for individual vulnerability details...

CLEANSTART-2026-FC45371 Security fix for CVE-2026-101899 applied in: langfuse 3.225.9-r5

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BO31904 Security fix for GHSA-f88m-g3jw-g9cj applied in: langfuse-worker 3.225.9-r3

Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UG53447 Security fix for GHSA-rgj7-g3m4-5g8c applied in: langfuse-worker 3.225.9-r3

Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-DF16083 Security fix for CVE-2026-45820 applied in: langfuse-worker 3.225.9-r3

Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JG00673 uuid before 14

Security vulnerability affects the langfuse-worker package. uuid before 14...

CLEANSTART-2026-LG90193 Next

Security vulnerability affects the langfuse-worker package. Next...

CLEANSTART-2026-ZG01610 uuid is for the creation of RFC9562 (formerly RFC4122) UUIDs

Security vulnerability affects the langfuse-worker package. uuid is for the creation of RFC9562 formerly RFC4122 UUIDs...

CLEANSTART-2026-BZ86310 Security fix for GHSA-wq5f-xc86-pv6w applied in: langfuse-worker 3.225.9-r5

Security vulnerability affects the langfuse-worker package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XR10051 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...