CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...

CLEANSTART-2026-UI56103 XMLscanner

Security vulnerability affects the apache-hive package. XMLscanner...

CLEANSTART-2026-XS63603 In Eclipse Jetty versions 9

Security vulnerability affects the apache-hive package. In Eclipse Jetty versions 9...

CLEANSTART-2026-VM57227 Those using java

Security vulnerability affects the apache-hive package. Those using java...

CLEANSTART-2026-WR59127 Apache Xerces2 Java Parser before 2

Security vulnerability affects the apache-hive package. Apache Xerces2 Java Parser before 2...

CLEANSTART-2026-QA75834 Out-of-bounds memory operations in org

Security vulnerability affects the apache-hive package. Out-of-bounds memory operations in org...

CLEANSTART-2026-HR57844 There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads

Security vulnerability affects the apache-hive package. There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads...

CLEANSTART-2026-AT67837 Socket Appender in Apache Log4j Core versions 2

Security vulnerability affects the apache-hive package. The Socket Appender in Apache Log4j Core versions 2...

CLEANSTART-2026-UB44506 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-hive package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-MW74031 Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network

Security vulnerability affects the apache-hive package. Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

CLEANSTART-2026-NZ47106 Jettison before v1

Security vulnerability affects the apache-hive package. Jettison before v1...

CLEANSTART-2026-ZU77357 Netty is an open-source, asynchronous event-driven network application framework

Security vulnerability affects the apache-hive package. Netty is an open-source, asynchronous event-driven network application framework...

CLEANSTART-2026-IQ25144 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-BY06273 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-JA22493 Apache Log4j Core's XmlLayout https://logging

Security vulnerability affects the apache-hive package. Apache Log4j Core's XmlLayout https://logging...

CLEANSTART-2026-VO44592 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-FW96675 infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements

Security vulnerability affects the apache-hive package. An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements...

CLEANSTART-2026-HP63301 Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4

Security vulnerability affects the apache-hive package. Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4...

CLEANSTART-2026-IJ97561 stack overflow in Jettison before v1

Security vulnerability affects the apache-hive package. A stack overflow in Jettison before v1...

CLEANSTART-2026-RP42469 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1

CVE-2026-34479 affects multiple packages. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1. See references for individual vulnerability details...