CLEANSTART-2026-SD37188 Security fix for CVE-2025-67721 applied in: apache-nifi 2.7.2-r7, hazelcast 5.7.0-r1, spark-sc213-jdk17-py311 4.1.1-r2, trino 479-r0

CVE-2025-67721 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IT89059 Security fix for CVE-2026-42579 applied in: apache-hive 4.2.0-r3, apache-nifi 2.9.0-r1, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r1, elasticsearch 9.4.3-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LT22679 Security fix for CVE-2026-42586 applied in: apache-hive 4.2.0-r3, hazelcast 5.7.0-r1, management-api-for-apache-cassandra-5.0 0.1.118-r2, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3

CVE-2026-42586 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HC86648 Security fix for CVE-2026-42582 applied in: trino 480-r3

Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IX07149 Security fix for CVE-2026-46340 applied in: apache-hive 4.2.0-r5, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3

CVE-2026-46340 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HY47221 Security fix for CVE-2026-44894 applied in: apache-nifi 2.9.0-r1, trino 480-r3

CVE-2026-44894 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GB27003 Security fix for CVE-2026-13006 applied in: akhq 0.27.1-r5, apache-nifi 2.10.0-r1, apache-nifi 2.6.0-r3, apache-nifi-registry 2.9.0-r3, cassandra-reaper-fips 4.2.5-r1, sonarqube 26.3.0.120487-r3, trino 480-r4, trino 483-r2

CVE-2026-13006 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BZ08231 Security fix for CVE-2026-6790 applied in: apache-hive 4.0.1-r8, apache-nifi 2.10.0-r3, apache-zookeeper 3.9.5-r8, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r1, solr 10.0.0-r6, strimzi-kafka-operator 1.1.0-r2, trino 480-r10, trino 483-r1

CVE-2026-6790 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NB43165 Security fix for CVE-2026-62380 applied in: elasticsearch 9.5.2-r2, keycloak 26.5.7-r8, trino 480-r11

CVE-2026-62380 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EX11941 Security fix for CVE-2026-62243 applied in: apache-zookeeper 3.8.6-r6, apache-zookeeper 3.9.5-r6, elasticsearch 9.5.2-r2, keycloak 26.5.7-r8, solr 10.0.0-r8, solr 9.10.1-r8, solr 9.8.1-r3, trino 480-r11

CVE-2026-62243 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DD90404 Security fix for CVE-2026-59902 applied in: apache-hive 4.0.1-r12, trino 480-r11

CVE-2026-59902 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GV10052 Security fix for CVE-2026-76816 applied in: trino 480-r11

Security vulnerability affects the trino package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GG40538 jackson-databind's deserializer for java

Multiple security vulnerabilities affect the trino package. jackson-databind's deserializer for java. See references for individual vulnerability details...

PT-2026-98430

Multiple security vulnerabilities affect the trino package. jackson-databind's deserializer for java. See references for individual vulnerability details...

GO-2026-5024 vulnerabilities

Vulnerabilities for packages: k3s, kubeflow-katib, trino, gitlab-rails-ce-fips, kyverno, net-kourier-fips, containerd, etcd, gitlab-workhorse-ce, gitlab-rails-ce, kube-conformance, helm, knative-operator-fips, upwind-agent, commercial-kyverno, etcd-fips...

GO-2026-5024 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, helm, trino, k3s, kyverno...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: py3-azure-identity, buildkitd, zot, rekor, policy-controller, py3-cassandra-medusa, airflow, terragrunt, sqlpad, restic, spire-server, trino, harbor-registry, hugo, bank-vaults, sigstore-scaffolding, trivy, cortex, kubescape, k8sgpt, argo-workflows,...

CLEANSTART-2026-SJ37356 Security fixes in trino 483-r2

Package trino version 483-r2 fixes 1 vulnerabilities: CVE-2026-13006...

CLEANSTART-2026-CU90508 Security fixes in trino 483-r1

Package trino version 483-r1 fixes 10 vulnerabilities: CVE-2026-56852, ghsa-f4v5-65jj-pcr2, ghsa-7p3p-8qv8-m2vh, CVE-2026-10051, CVE-2026-6790...

CVE-2026-16336

A flaw was found in Trino's OAuth2/OIDC component. A remote attacker can exploit this vulnerability by manipulating the redirecturi argument, leading to an open redirect. This could allow an attacker to redirect users to malicious websites, potentially enabling phishing attacks or credential thef...