93734 matches found
CLEANSTART-2026-RM27801 In Eclipse Jetty versions 1
Security vulnerability affects the apache-hive package. In Eclipse Jetty versions 1...
CLEANSTART-2026-EA81114 Uncontrolled Recursion vulnerability in Apache Commons Lang
Security vulnerability affects the apache-hive package. Uncontrolled Recursion vulnerability in Apache Commons Lang...
CLEANSTART-2026-WA43103 In Eclipse Jetty Server, versions 9
Security vulnerability affects the apache-hive package. In Eclipse Jetty Server, versions 9...
CLEANSTART-2026-ER01200 In Eclipse Jetty, versions 9
Security vulnerability affects the apache-hive package. In Eclipse Jetty, versions 9...
CLEANSTART-2026-SB27821 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-hive package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
CLEANSTART-2026-CP28423 vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1
Security vulnerability affects the apache-hive package. A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1...
CLEANSTART-2026-DT34494 In pgjdbc before 42
Security vulnerability affects the apache-hive package. In pgjdbc before 42...
CLEANSTART-2026-YN29187 In Eclipse Jetty, the HTTP/1
Security vulnerability affects the apache-hive package. In Eclipse Jetty, the HTTP/1...
CLEANSTART-2026-YH00671 pgjdbc is an open source postgresql JDBC Driver
Security vulnerability affects the apache-hive package. pgjdbc is an open source postgresql JDBC Driver...
CLEANSTART-2026-NM72661 Security fix for GHSA-673j-qm5f-xpv8 applied in: apache-hive 3.1.3-r3
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-WS21723 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite
CVE-2026-46718 affects multiple packages. Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Apache Calcite. See references for individual vulnerability details...
CLEANSTART-2026-DW89349 pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE
Security vulnerability affects the apache-hive package. pgjdbc, the PostgreSQL JDBC Driver, allows attacker to inject SQL if using PreferQueryMode=SIMPLE...
CLEANSTART-2026-QH78239 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
Security vulnerability affects the apache-nifi-registry package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
CLEANSTART-2026-BP29936 In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service (DoS) condition
Security vulnerability affects the apache-nifi-registry package. In Micrometer, it is possible for a user to provide specially crafted gRPC requests that may cause a denial-of-service DoS condition...
CLEANSTART-2026-KL61134 application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store
Security vulnerability affects the apache-nifi-registry package. An application using Spring Security's WebAuthn support may be vulnerable to user verification bypass when using a distributed HTTP session store...
CLEANSTART-2026-DS55761 Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name
Security vulnerability affects the apache-nifi-registry package. Applications that build a Content-Disposition header value from untrusted input may be vulnerable to HTTP response splitting when the input is a malicious file name...
CLEANSTART-2026-GT33551 Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password
Security vulnerability affects the apache-nifi-registry package. Spring LDAP's DirContextAuthenticationStrategy implementations do not reject a bind request where a non-empty username is paired with an empty or null password...
CLEANSTART-2026-AA31447 Several components in Spring Security compare security-sensitive values using standard string equality (String
Security vulnerability affects the apache-nifi-registry package. Several components in Spring Security compare security-sensitive values using standard string equality String...
CLEANSTART-2026-IL27901 Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors
Security vulnerability affects the apache-nifi-registry package. Spring MVC and WebFlux applications that obtain a data-binding Errors instance with HTML escaping enabled and then render field errors using the no-argument Errors...
CLEANSTART-2026-DN56273 Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null (all-zero) initializ...
Security vulnerability affects the apache-nifi-registry package. Applications using AesBytesEncryptor with the two-argument constructor or when passing a null IV generator and CBC as the encryption mode encrypt data with AES/CBC using a null all-zero initialization vector...