95233 matches found
CLEANSTART-2026-JK79354 Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect
Security vulnerability affects the apache-hive package. A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect...
CLEANSTART-2026-MN75797 Applications that evaluate Spring Expression Language (SpEL) expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active
Security vulnerability affects the apache-hive package. Applications that evaluate Spring Expression Language SpEL expressions using SimpleEvaluationContext may be vulnerable to a safety guard bypass when the SpEL expression compiler is active...
CLEANSTART-2026-KK34525 security issue was found in Netplex Json-smart 2
Security vulnerability affects the apache-hive package. A security issue was found in Netplex Json-smart 2...
CLEANSTART-2026-SC57620 Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1
Security vulnerability affects the elasticsearch package. Relative Path Traversal in the ISA-Tab parser in Apache Software Foundation Apache Tika from 1...
CLEANSTART-2026-PP78809 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON
CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...
CLEANSTART-2026-TI66876 Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5
CVE-2026-71290 affects multiple packages. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details...
CLEANSTART-2026-JH16561 Improper certificate validation in Apache MINA SSHD (server-side)
Security vulnerability affects the sonarqube package. Improper certificate validation in Apache MINA SSHD server-side...
CLEANSTART-2026-MM56894 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CLEANSTART-2026-PH67619 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA
Security vulnerability affects the sonarqube package. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA...
CLEANSTART-2026-IP32921 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...
CLEANSTART-2026-WC97010 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Security vulnerability affects the apache-superset package. cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
CLEANSTART-2026-AQ64279 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-JM61604 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-IT04262 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings
Security vulnerability affects the grafana-alloy package. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings...
CLEANSTART-2026-CK84592 Uncontrolled Recursion vulnerability in Apache Commons Lang
Security vulnerability affects the elasticsearch package. Uncontrolled Recursion vulnerability in Apache Commons Lang...
CLEANSTART-2026-BJ90324 Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4
Security vulnerability affects the spark-sc212-jdk17-py311 package. Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4...
CLEANSTART-2026-CW84944 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings
Security vulnerability affects the spark-sc212-jdk17-py311 package. Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings...
CLEANSTART-2026-QF48371 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
Security vulnerability affects the spark-sc212-jdk17-py311 package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...