CLEANSTART-2026-WT54034 Security fixes for CVE-2025-8671, CVE-2026-0636, CVE-2026-10532, CVE-2026-13006, CVE-2026-1605, CVE-2026-22732, CVE-2026-2332, CVE-2026-24281, CVE-2026-33870, CVE-2026-33871, CVE-2026-3505, CVE-2026-40983, CVE-2026-40984, CVE-2026-54399, CVE-2026-54428, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, CVE-2026-54516, CVE-2026-54517, CVE-2026-54518, CVE-2026-5588, CVE-2026-9828, ghsa-355h-qmc2-wpwf, ghsa-3677-xxcr-wjqv, ghsa-38f8-5428-x5cv, ghsa-3qp7-7mw8-wx86, ghsa-45q3-82m4-75jr, ghsa-563q-j3cm-6jxm, ghsa-57rv-r2g8-2cj3, ghsa-5pvg-856g-cp85, ghsa-5x3r-wrvg-rp6q, ghsa-676x-f7gg-47vc, ghsa-72hv-8253-57qq, ghsa-c2gf-v879-257j, ghsa-c3fc-8qff-9hwx, ghsa-c653-97m9-rcg9, ghsa-cj8j-37rh-8475, ghsa-cm33-6792-r9fm, ghsa-cmm3-54f8-px4j, ghsa-cq4q-cv5g-r8q5, ghsa-cvc6-q2cp-2xhw, ghsa-f6hv-jmp6-3vwv, ghsa-hvcg-qmg6-jm4c, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-qqpg-mvqg-649v, ghsa-rwm7-x88c-3g2p, ghsa-v8h7-rr48-vmmv, ghsa-vxf7-qj7q-83fh, ghsa-w573-9ffj-6ff9, ghsa-wg6q-6289-32hp, ghsa-x2wq-9x2f-fhj7, ghsa-x44p-gvrj-pj2r, ghsa-x4gw-5cx5-pgmh, ghsa-xmv7-r254-6q78, ghsa-xxqh-mfjm-7mv9 applied in versions: 2.10.0-r1, 2.10.0-r2, 2.7.2-r0, 2.7.2-r2, 2.9.0-r0, 2.9.0-r1

Multiple security vulnerabilities affect the apache-nifi package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-CM33-6792-R9FM vulnerabilities

Vulnerabilities for packages: akhq, opensearch, sonarqube, apache-pulsar, tez, druid, management-api-for-apache-cassandra-5.0, spark, apache-nifi, keycloak, flyway, apicurio-registry, trino, thingsboard, wildfly, infinispan, zipkin, strimzi-kafka-operator...

GHSA-MW35-8RX3-XF9R vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm-cuda-12.9...

GHSA-V569-HP3G-36WR vulnerabilities

Vulnerabilities for packages: ruby3.4-rack, ruby3.3-rack, ruby4.0-rack, kube-fluentd-operator, logstash, ruby3.2-rack...

GHSA-J4XF-2G29-59PH vulnerabilities

Vulnerabilities for packages: deno, buck2, rye, sccache, rustup, zizmor, cargo-c, qdrant, pixi, wasmcloud, wasm-pack...

GHSA-4GMJ-3P3H-GM8H

creationtimestamp| type| source ---|---|--- 2024-02-26 21:17:22+00:00| seen| https://t.me/ctinow/193763...

@dotgov/bpmn (>=0.0.1 <=0.0.29), @dotgov/z_bpmn (>=0.0.1 <=2.0.0) +19 more potentially affected by unknown CVE via bpmn-js-properties-panel (>=0.11.2 <=0.30.0)

bpmn-js-properties-panel NPM version =0.11.2, =0.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.1, =1.1.22, =1.0.97, =2.0.0, =1.0.14, =0.0.1, =0.0.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-VPJ4-89Q8-RH38...