CVE-2026-103513

The Apache DataSketches C++ library (repository: datasketches-cpp ) is vulnerable to out-of-bounds read and write during CPC sketch deserialization. The root cause is a failure to validate the read position during decoding and a lack of validation for decoded row indices and header fields (includ...

CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

EUVD-2026-96307

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

CVE-2026-103513 Apache DataSketches: datasketches-cpp: Out-of-bounds read and write in the CPC sketch deserialization allows memory corruption via a crafted sketch

Out-of-bounds read and write in the CPC sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. A crafted serialized CPC sketch passed to cpcsketch::deserialize, from either a byte buffer or a stream, can cause the decompressor to read past the end of the compressed data, becaus...

CVE-2026-103501

Apache DataSketches C++ (repo: datasketches-cpp ) is vulnerable to a heap buffer overflow in the HLL sketch deserialization process. When operating in LIST mode from a byte buffer or stream, the software fails to validate the coupon count against the fixed buffer capacity of 8 entries. A crafted ...

CVE-2026-103501 Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...

CVE-2026-103501 Apache DataSketches: datasketches-cpp: HLL CouponList Deserialization Buffer Overflow allows memory corruption via a crafted sketch

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...

EUVD-2026-96306

Heap buffer overflow in the HLL sketch deserialization of Apache DataSketches C++ repo: datasketches-cpp. When deserializing a sketch in LIST mode, from either a byte buffer or a stream, the coupon count was read from the input and used as the number of entries to copy into a fixed buffer of 8...

GHSA-C9FF-59G8-M36Q vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-84218 vulnerabilities

Vulnerabilities for packages: apache-camel-karavan-devmode...

CVE-2026-104021 Fastcache by Host.it <= 1.7.4 - Authenticated (Administrator+) Code Injection via .htaccess Directive Injection via 'cache_cookie_exclude' Setting

The Fastcache by Host.it plugin for WordPress is vulnerable to Code Injection in all versions up to, and including, 1.7.4 via the fastcachesettingscachecookieexclude parameter. This is due to the plugin registering the cachecookieexclude setting via registersetting without a sanitizecallback, whi...

Airflow Experimental <1.10.11 - REST API Auth Bypass

Airflow's Experimental API prior 1.10.11 allows all API requests without authentication. id: CVE-2020-13927 info: name: Airflow Experimental 1.10.11 - REST API Auth Bypass author: pdteam severity: critical description: | Airflow's Experimental API prior 1.10.11 allows all API requests without...

CLEANSTART-2026-SQ68931 In Apache Airflow before 3

Security vulnerability affects the airflow-3 package. In Apache Airflow before 3...

CLEANSTART-2026-UI77772 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team,...

Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site...

CLEANSTART-2026-SG17271 Before apache-airflow 3

Security vulnerability affects the airflow-3 package. Before apache-airflow 3...

CLEANSTART-2026-CG47796 Apache Airflow's secrets masker did not mask `var

Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker did not mask var...

CLEANSTART-2026-UQ32467 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` and `PATCH /api/v2/...

Security vulnerability affects the airflow-3 package. Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections...

CLEANSTART-2026-NZ97420 Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI

Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI...

CLEANSTART-2026-OM50067 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse

Security vulnerability affects the airflow-3 package. Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfillid path segment failed to parse...

CLEANSTART-2026-CM94028 Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read

Security vulnerability affects the airflow-3 package. Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read...