5076 matches found
CLEANSTART-2026-KL42544 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6
Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MS93111 Security fixes for ghsa-72hv-8253-57qq applied in versions: 3.8.6-r0
Security vulnerability affects the apache-zookeeper package. This issue is resolved in later releases. See references for vulnerability details...
GHSA-C4QG-J8JG-42Q5
creationtimestamp| type| source ---|---|--- 2026-04-26 03:29:34+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3mkemho5wntb2 2026-04-26 07:57:04+00:00| seen|...
GHSA-M9HQ-H476-H2G8 vulnerabilities
Vulnerabilities for packages: grafana-pyroscope...
GHSA-5JV8-H7QH-RF5P vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-pipelines-driver-fips, argo-workflows-fips, kubeflow-pipelines-fips...
CLEANSTART-2026-QM52705 Security fixes for ghsa-72hv-8253-57qq, ghsa-qqpg-mvqg-649v applied in versions: 3.9.4-r0, 3.9.4-r6
Multiple security vulnerabilities affect the apache-zookeeper package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-PQF5-4PQQ-29F5
creationtimestamp| type| source ---|---|--- 2026-04-24 19:23:03+00:00| published-proof-of-concept| Telegram/KzwiN8QhKmj3TuqYtGeX9siiyoqjfAY8f7zipbEz0Wiqhk...
GHSA-25QR-6MPR-F7QX
creationtimestamp| type| source ---|---|--- 2026-04-24 15:21:22+00:00| seen| Telegram/Y5QzcKDCmo7jQNGBLdJ87dzQSi2eRz7Wqhm7Qv2MeYFXM...
GHSA-JFWF-28XR-XW6Q
creationtimestamp| type| source ---|---|--- 2026-04-24 15:21:22+00:00| seen| Telegram/Y5QzcKDCmo7jQNGBLdJ87dzQSi2eRz7Wqhm7Qv2MeYFXM...
GHSA-V3QC-WRWX-J3PW
creationtimestamp| type| source ---|---|--- 2026-04-23 23:27:23+00:00| seen| Telegram/OgOvWOsYKDsUPw2Tk2S9qGbonIgzDZlRsoTRSBtlTZ01pNI...
Cloudflare has SSRF via redirect following through its image-binding-transform endpoint (incomplete fix for GHSA-qpr4)
Summary The fetch call for remote images in packages/integrations/cloudflare/src/utils/image-binding-transform.ts line 28 uses the default redirect: 'follow' behavior. This allows the Cloudflare Worker to follow HTTP redirects to arbitrary URLs, bypassing the isRemoteAllowed domain allowlist chec...
GHSA-6F7G-V4PP-R667
creationtimestamp| type| source ---|---|--- 2026-04-23 21:26:47+00:00| seen| Telegram/lUzHwqY45MHoOS5UDHqr6saeA9vYjttsYdPIjTNMATUwM...
GHSA-5JV8-H7QH-RF5P
creationtimestamp| type| source ---|---|--- 2026-04-23 21:25:56+00:00| seen| Telegram/vObnyALXsyXLFJkccB0eoKwgfsCPRSJaAgpRRcRjZAUW0s...
GHSA-HC8W-H2MF-HP59
creationtimestamp| type| source ---|---|--- 2026-04-23 21:25:36+00:00| published-proof-of-concept| Telegram/tS2ffuiIBjg-jG5ou8TlrNJjBU2OGhcKfhZwclhyaQjdHg...
GHSA-XMGF-HQ76-4VX2 vulnerabilities
Vulnerabilities for packages: rustls-openssl-client, sccache, valkey-ldap, rustup, sdp-k8s-injector, ztunnel-fips, komodo, bootc, sentry-cli, sqlx, typst, vector, guestproxyagent, deno, rpm-sequoia...
GHSA-HPPC-G8H3-XHP3 vulnerabilities
Vulnerabilities for packages: sdp-k8s-injector, deno, sccache, vector, sqlx, rustup, rpm-sequoia...
GHSA-GC9W-CC93-RJV8
creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:15+00:00| seen| Telegram/Np0HDJKgovD5cW8jduvZL9F8almQ8yF8RTJlUUKmbI8o04...
GHSA-68QG-G8MG-6PR7
creationtimestamp| type| source ---|---|--- 2026-04-23 05:19:00+00:00| seen| Telegram/AFbUj5XU0FaWjJKIeAgIoECWWJJu8HcCym9i1gF2DKGuNiY...