CVE-2026-93763 Silent plaintext persistence via unresolved callable database name in encryption schema map

A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning. A party holding ordinary read access to the...

Silent plaintext persistence via unresolved callable database name in encryption schema map

A protection mechanism failure in the object-document mapper's encryption configuration generation can cause fields that an application declared for client-side field-level encryption to be written and kept in cleartext, without any error or warning. A party holding ordinary read access to the...

Missing Authorization

Overview Affected versions of this package are vulnerable to Missing Authorization via the smwtask API module, which lacks proper authorization checks. An attacker can access internal database statistics, enqueue and execute maintenance jobs, and modify stored semantic data by sending...

CVE-2026-77928

ClipBucket v5 before 5.5.3-182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary database contents by submitting the msgid parameter as an array to bypass the cleanrequests sanitization function in ClipBucket.class.php. Attackers can pass unsanitize...

CVE-2026-77928 ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint

ClipBucket v5 before 5.5.3-182 contains a blind SQL injection vulnerability that allows authenticated users to extract arbitrary database contents by submitting the msgid parameter as an array to bypass the cleanrequests sanitization function in ClipBucket.class.php. Attackers can pass unsanitize...

CVE-2026-93597

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or loopback IPv4 payloads to reach internal services a...

CVE-2026-93597

ArcadeDB versions before 26.9.1 contain a Server-Side Request Forgery (SSRF) vulnerability in the SSRF guard used by the IMPORT DATABASE and server commands. The root cause is a failure to validate IPv6 transition addresses (NAT64, 6to4, or Teredo), allowing an authenticated attacker to supply UR...

CVE-2026-93597 ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or loopback IPv4 payloads to reach internal services a...

CVE-2026-93597 ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or loopback IPv4 payloads to reach internal services a...

CVE-2026-93597 ArcadeDB before 26.9.1 SSRF via IPv6 transition addresses

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or loopback IPv4 payloads to reach internal services a...

EUVD-2026-82892

ArcadeDB versions before 26.9.1 fail to validate IPv6 transition addresses in the SSRF guard used by IMPORT DATABASE and server commands. Authenticated attackers can supply URLs resolving to NAT64, 6to4, or Teredo addresses embedding RFC 1918 or loopback IPv4 payloads to reach internal services a...

CLEANSTART-2026-FT89883 Security fix for CVE-2026-48710 applied in: airflow-3 3.0.6-r5, airflow-3 3.1.8-r2, airflow-3 3.2.0-r0, k8s-sidecar 2.2.3-r1, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0

CVE-2026-48710 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LF37646 Security fix for CVE-2026-34180 applied in: apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, kserve-storage-controller 0.19.0-r0, litellm-database 1.90.2-r0

CVE-2026-34180 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JD93380 Security fix for ghsa-jm82-fx9c-mx94 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SM84603 Security fix for CVE-2026-57204 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-PT72427 Security fix for CVE-2026-54651 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-JY50782 Security fix for CVE-2026-54531 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SQ66905 Security fix for CVE-2026-54530 applied in: litellm-database 1.85.1-r0

Security vulnerability affects the litellm-database package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SB78573 Security fix for CVE-2026-54283 applied in: airflow-3 3.0.6-r5, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0, litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2026-54283 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EW07034 Security fix for CVE-2026-54282 applied in: airflow-3 3.0.6-r5, kserve-storage-controller 0.19.0-r0, litellm-database 1.85.1-r0, litellm-database 1.96.0-r0, litellm-database 1.97.0-r0

CVE-2026-54282 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...