CLEANSTART-2026-AF62012 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs

CVE-2026-46597 affects multiple packages. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs. See references for individual vulnerability details...

CLEANSTART-2026-XF84343 For certain crafted inputs, a 'ed25519

CVE-2026-46598 affects multiple packages. For certain crafted inputs, a 'ed25519. See references for individual vulnerability details...

CLEANSTART-2026-KY37458 RSA and DSA public key parsers did not enforce size limits on key parameters

CVE-2026-39829 affects multiple packages. The RSA and DSA public key parsers did not enforce size limits on key parameters. See references for individual vulnerability details...

CLEANSTART-2026-LH75496 in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it

CVE-2026-39833 affects multiple packages. The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it. See references for individual vulnerability details...

CLEANSTART-2026-FA45639 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh

CVE-2026-39832 affects multiple packages. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh. See references for individual vulnerability details...

CLEANSTART-2026-QF95955 gRPC-Go is the Go language implementation of gRPC

Security vulnerability affects the kube-state-metrics-fips package. gRPC-Go is the Go language implementation of gRPC...

CLEANSTART-2026-KN86223 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-ZR37336 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-WB40347 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-BN21092 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-OM34556 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-ED93010 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes

Security vulnerability affects the wso2mi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...

CLEANSTART-2026-JS37598 security flaw has been discovered in mwiede jsch up to 2

Security vulnerability affects the wso2mi package. A security flaw has been discovered in mwiede jsch up to 2...

CLEANSTART-2026-ZC15270 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it

Security vulnerability affects the npm package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...

CLEANSTART-2026-UH79636 Netty is a network application framework for development of protocol servers and clients

CVE-2026-44249 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-XI69857 Netty is a network application framework for development of protocol servers and clients

CVE-2026-47691 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-IR80784 Netty is a network application framework for development of protocol servers and clients

CVE-2026-45416 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-FZ21134 Netty is a network application framework for development of protocol servers and clients

CVE-2026-50010 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-IG09233 Deserialization of untrusted data vulnerability in QOS

Security vulnerability affects the trino package. Deserialization of untrusted data vulnerability in QOS...

CLEANSTART-2026-MC53420 Netty is a network application framework for development of protocol servers and clients

Security vulnerability affects the trino package. Netty is a network application framework for development of protocol servers and clients...