CLEANSTART-2026-RG68334 Security fix for GHSA-jm66-cg57-jjv5 applied in: airflow-2 2.10.3-r2, az 2.81.0-r0

GHSA-jm66-cg57-jjv5 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KN51802 Security fix for CVE-2026-27448 applied in: airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, az 2.84.0-r0, pritunl 1.30.3431.73-r1

CVE-2026-27448 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZF94018 Security fix for CVE-2026-27459 applied in: airflow-2 2.11.2-r1, airflow-3 3.1.8-r0, airflow-3 3.2.0-r0, az 2.84.0-r0, pritunl 1.30.3431.73-r1

CVE-2026-27459 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IK87467 Security fix for CVE-2026-44405 applied in: airflow-2 2.10.3-r2, airflow-3 3.0.6-r5, airflow-3 3.1.8-r5, airflow-3 3.2.0-r0, airflow-3 3.2.1-r5, airflow-3 3.2.2-r5, apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, az 2.88.0-r0, az 2.89.1-r3

CVE-2026-44405 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CA24023 Security fix for CVE-2026-48522 applied in: airflow-2 2.11.2-r3, airflow-3 3.1.8-r3, airflow-3 3.2.1-r2, apache-superset 5.0.0-r7, apache-superset 6.0.0-r5, az 2.83.0-r2, az 2.84.0-r3, jupyterhub-k8s-hub 4.3.5-r1, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-48522 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SR43312 Security fix for CVE-2026-69247 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, airflow-3 3.3.1-r1, apache-superset 5.0.0-r9, apache-superset 6.0.0-r7, az 2.84.0-r6, az 2.86.0-r1, az 2.87.0-r1, az 2.89.1-r3, kserve-storage-controller 0.19.0-r0, litellm-database 1.94.3-r0

CVE-2026-69247 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PD33882 Security fix for CVE-2026-69248 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, airflow-3 3.3.1-r1, az 2.84.0-r6, az 2.86.0-r1, az 2.87.0-r1, az 2.89.1-r3, kserve-storage-controller 0.19.0-r0, litellm-database 1.94.3-r0

CVE-2026-69248 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IL58340 Security fixes in az 2.89.1-r1

Package az version 2.89.1-r1 fixes 3 vulnerabilities: CVE-2026-69247, CVE-2026-69248, CVE-2026-69249...

CLEANSTART-2026-OW56041 Security fixes in az 2.89.1-r3

Package az version 2.89.1-r3 fixes 4 vulnerabilities: CVE-2026-44405, CVE-2026-69247, CVE-2026-69248, CVE-2026-69249...

CLEANSTART-2026-ME02492 Security fixes in az 2.89.1-r2

Package az version 2.89.1-r2 fixes 3 vulnerabilities: CVE-2026-69247, CVE-2026-69248, CVE-2026-69249...

Malicious code in streak-metricsaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...

MAL-2026-11527 Malicious code in streak-metricsaz (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91054f07d768c0a8605fb644d2cc4003bb6a5d5b9502be2911d9090bc5a37d45 [email protected] presents itself as a calendar/streak math helper but its main entry runs a top-level IIFE that copies a bundled binary...

CVE-2026-50559 vulnerabilities

Vulnerabilities for packages: hono, floci-az, keycloak-fips, apicurio-registry-fips, request-9047-keycloak-fips, apicurio-registry...

GHSA-QCXP-GM7M-4J5V vulnerabilities

Vulnerabilities for packages: hono, floci-az, keycloak-fips, apicurio-registry-fips, request-9047-keycloak-fips, apicurio-registry...

CLEANSTART-2026-FY22516 Security fixes in az 2.84.0-r1

Package az version 2.84.0-r1 fixes 1 vulnerabilities: CVE-2026-4539...

CLEANSTART-2026-HK53162 Security fixes in az 2.81.0-r0

Package az version 2.81.0-r0 fixes 3 vulnerabilities: ghsa-jm66-cg57-jjv5, ghsa-mrfv-m5wm-5w6w, ghsa-58pv-8j8x-9vj2...

PT-2026-85899

Package az version 2.81.0-r0 fixes 3 vulnerabilities: ghsa-jm66-cg57-jjv5, ghsa-mrfv-m5wm-5w6w, ghsa-58pv-8j8x-9vj2...

PT-2026-85981

Package az version 2.83.0-r3 fixes 1 vulnerabilities: ghsa-537c-gmf6-5ccf...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: pinot-fips, tez, knative-kafka-broker, floci-az, tinkerpop, seata, zipkin, hadoop-fips, apicurio-registry-fips, apache-pulsar, request-9047-keycloak-fips, floci, management-api-for-apache-cassandra-5.0, celeborn, apache-activemq-artemis, apicurio-registry, neo4j,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: pinot-fips, tez, knative-kafka-broker, floci-az, tinkerpop, seata, zipkin, hadoop-fips, apicurio-registry-fips, apache-pulsar, request-9047-keycloak-fips, floci, management-api-for-apache-cassandra-5.0, celeborn, apache-activemq-artemis, apicurio-registry, neo4j,...