CLEANSTART-2026-FB52227 flaw was found in Netty's HttpServerCodec

Security vulnerability affects the elasticsearch package. A flaw was found in Netty's HttpServerCodec...

CLEANSTART-2026-PC54131 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

CLEANSTART-2026-TA23513 zstd-jni before 1

CVE-2026-87824 affects multiple packages. zstd-jni before 1. See references for individual vulnerability details...

CLEANSTART-2026-YH80371 zstd-jni versions before 1

CVE-2026-87795 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...

CLEANSTART-2026-YT94531 zstd-jni versions 1

CVE-2026-90560 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-BK85546 zstd-jni before 1

CVE-2026-87823 affects multiple packages. zstd-jni before 1. See references for individual vulnerability details...

CLEANSTART-2026-WQ92257 When audit logging is enabled (zookeeper

CVE-2026-84439 affects multiple packages. When audit logging is enabled zookeeper. See references for individual vulnerability details...

CLEANSTART-2026-OK35462 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...

Security vulnerability affects the spark-sc213-jdk17-py312 package. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings...

CLEANSTART-2026-HW07490 In Bouncy Castle for Java before 1

Security vulnerability affects the spark-sc213-jdk17-py312 package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-XP43245 In Bouncy Castle for Java before 1

CVE-2026-59651 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-AY62186 In Bouncy Castle for Java before 1

CVE-2026-59639 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-KV94279 pgjdbc is an open source postgresql JDBC Driver

Security vulnerability affects the apache-hive package. pgjdbc is an open source postgresql JDBC Driver...

CLEANSTART-2026-AF62012 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

CVE-2026-46597 affects multiple packages. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. See references for individual vulnerability details...

CLEANSTART-2026-XF84343 For certain crafted inputs, a 'ed25519

CVE-2026-46598 affects multiple packages. For certain crafted inputs, a 'ed25519. See references for individual vulnerability details...

CLEANSTART-2026-KY37458 RSA and DSA public key parsers did not enforce size limits on key parameters

CVE-2026-39829 affects multiple packages. The RSA and DSA public key parsers did not enforce size limits on key parameters. See references for individual vulnerability details...

CLEANSTART-2026-LH75496 in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it

CVE-2026-39833 affects multiple packages. The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. See references for individual vulnerability details...

CLEANSTART-2026-FA45639 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh

CVE-2026-39832 affects multiple packages. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh. See references for individual vulnerability details...

CLEANSTART-2026-QF95955 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the kube-state-metrics-fips package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-KN86223 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-ZR37336 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...