CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2

Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...

CLEANSTART-2026-IB07435 Vulnerability in core of Apache HTTP Server 2

Security vulnerability affects the apache2 package. Vulnerability in core of Apache HTTP Server 2...

CLEANSTART-2026-TY25430 PyJWT is a Python implementation of JSON Web Token standards

Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...

CLEANSTART-2026-GA98365 PyJWT is a Python implementation of JSON Web Token standards

Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...

CLEANSTART-2026-IE39566 PyJWT is a Python implementation of JSON Web Token standards

Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...

CLEANSTART-2026-TV45483 urllib3 is an HTTP client library for Python

Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...

CLEANSTART-2026-YD28238 PyJWT is a Python implementation of JSON Web Token standards

Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...

CLEANSTART-2026-QB35477 geopy is a geocoding library for Python

CVE-2026-77387 affects multiple packages. geopy is a geocoding library for Python. See references for individual vulnerability details...

CLEANSTART-2026-JH53704 Werkzeug is a comprehensive WSGI web application library

CVE-2026-102598 affects multiple packages. Werkzeug is a comprehensive WSGI web application library. See references for individual vulnerability details...

net/url: Incorrect parsing of IPv6 host literals in net/url

The Go standard library function net/url.Parse insufficiently validated the host/authority component and accepted some invalid URLs by effectively treating garbage before an IP-literal as ignorable. The function should have rejected this as invalid...

CLEANSTART-2026-HM12202 convert

Security vulnerability affects the php package. The convert...

CLEANSTART-2026-VN99750 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-AH23737 oras-go is a Go library for managing OCI artifacts

Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...

CLEANSTART-2026-CC29276 Security fix for GHSA-259r-337f-4rfw applied in: node-problem-detector 0.8.25-r1

Security vulnerability affects the node-problem-detector package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KG18431 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-AW83562 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-MS30353 OpenTelemetry-Go is the Go implementation of OpenTelemetry

CVE-2026-29181 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-KZ65595 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-ED67478 Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

CVE-2026-25680 affects multiple packages. Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service. See references for individual vulnerability details...