CLEANSTART-2026-AO75517 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...

Security vulnerability affects the etcd package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...

CLEANSTART-2026-DO02682 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation

Security vulnerability affects the etcd package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...

CLEANSTART-2026-WR65477 in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it

Security vulnerability affects the etcd package. The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it...

CLEANSTART-2026-VX19313 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...

Security vulnerability affects the etcd package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...

CLEANSTART-2026-CR96568 Security fix for GHSA-w67g-5rqw-f597 applied in: etcd 3.4.45-r2

Security vulnerability affects the etcd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GZ10195 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

Security vulnerability affects the etcd package. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service...

CLEANSTART-2026-KR31845 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree

Security vulnerability affects the etcd package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...

CLEANSTART-2026-FW80348 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels

Security vulnerability affects the httpbin package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels...

CLEANSTART-2026-BX77737 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the kafka package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-BN64162 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the kafka package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-KA63622 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the kafka package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-QF50624 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the kafka package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-HK23784 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the kafka package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-RP92768 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs

Security vulnerability affects the kafka package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...

CLEANSTART-2026-DU44734 In Eclipse Jetty, versions 12

Security vulnerability affects the kafka package. In Eclipse Jetty, versions 12...

CLEANSTART-2026-NR53059 In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable

Security vulnerability affects the kafka package. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable...

CLEANSTART-2026-JJ33513 In Eclipse Jetty, the HTTP/1

Security vulnerability affects the kafka package. In Eclipse Jetty, the HTTP/1...

CLEANSTART-2026-LA02184 Jupyter notebook is a web-based notebook environment for interactive computing

Security vulnerability affects the jupyter-notebook package. The Jupyter notebook is a web-based notebook environment for interactive computing...

CLEANSTART-2026-IA17108 Jupyter Notebook is a web-based notebook environment for interactive computing

Security vulnerability affects the jupyter-notebook package. Jupyter Notebook is a web-based notebook environment for interactive computing...

nat-tunnel

NAT Tunnel v0.01 If you have access to a server with public IP and unfiltered ports you can run NAT Tunnel NT server on the server, and NT client on your box behind NAT. the server requires 2 open ports: one for communication with the NT client --admin, the other for regular clients to connect to...