CLEANSTART-2026-AC87637 Security fixes in eks-distro-kube-proxy-fips 1.35.7-r1

Package eks-distro-kube-proxy-fips version 1.35.7-r1 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-ZR97403 Security fixes in wavefront-proxy 13.7-r1

Package wavefront-proxy version 13.7-r1 fixes 1 vulnerabilities: CVE-2026-41417...

CLEANSTART-2026-PY42210 Security fixes in wavefront-proxy 13.8-r0

Package wavefront-proxy version 13.8-r0 fixes 7 vulnerabilities: ghsa-72hv-8253-57qq, ghsa-pwqr-wmgm-9rr8, ghsa-w9fj-cfpg-grvv, ghsa-6hg6-v5c8-fphq, ghsa-3pxv-7cmr-fjr4...

CLEANSTART-2026-CN04720 Security fixes in eks-distro-kube-proxy-fips 1.35.7-r0

Package eks-distro-kube-proxy-fips version 1.35.7-r0 fixes 2 vulnerabilities: CVE-2026-24051, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-JZ53476 Security fixes in kserve-rest-proxy 0.12.0-r1

Package kserve-rest-proxy version 0.12.0-r1 fixes 6 vulnerabilities: CVE-2025-68121, CVE-2026-27142, CVE-2026-25679, CVE-2025-58190, CVE-2025-47911...

CLEANSTART-2026-QF38483 Security fixes in kube-rbac-proxy-fips 0.19.1-r0

Package kube-rbac-proxy-fips version 0.19.1-r0 fixes 2 vulnerabilities: CVE-2025-27144, ghsa-6v2p-p543-phr9...

CLEANSTART-2026-GX03760 Security fixes in kube-rbac-proxy 0.20.0-r0

Package kube-rbac-proxy version 0.20.0-r0 fixes 1 vulnerabilities: ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-RH97316 Security fixes in wavefront-proxy 13.9-r2

Package wavefront-proxy version 13.9-r2 fixes 1 vulnerabilities: CVE-2026-42577...

CVE-2026-59326

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-11870

The WP Ghost Hide My WP Ghost WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost Hide My WP Ghost WordPress...

CVE-2026-11870 Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass

The WP Ghost Hide My WP Ghost WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost Hide My WP Ghost WordPress...

CVE-2026-11870 Hide My WP Ghost < 7.0.05 - IP Address Spoofing via Trusted Proxy Headers Leading to Protection Mechanism Bypass

The WP Ghost Hide My WP Ghost WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost Hide My WP Ghost WordPress...

CVE-2026-11870

The WP Ghost Hide My WP Ghost WordPress plugin before 7.0.05 does not verify that client IP information comes from a trusted proxy before trusting attacker-controllable HTTP headers, allowing unauthenticated attackers to spoof their IP address to bypass the WP Ghost Hide My WP Ghost WordPress...

CVE-2026-11870

The WP Ghost (Hide My WP Ghost) WordPress plugin versions prior to 7.0.05 is vulnerable to an IP Address Spoofing attack. The root cause is the plugin's failure to verify that client IP information originates from a trusted proxy before accepting attacker-controllable HTTP headers. This oversight...

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

CVE-2026-59326 HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-59326 HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-59326 HTTP Proxy Credentials Logged in Plaintext by the Spring Boot Language Server

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

EUVD-2026-50979

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...

CVE-2026-59326

The Spring Boot language server logs the raw value of the httpsproxy/HTTPSPROXY/httpproxy/HTTPPROXY environment variable at INFO level whenever it creates an outbound HTTP client and no explicit http.proxy workspace setting is configured. Corporate proxy URLs frequently embed Basic-auth credentia...