CLEANSTART-2026-QU79402 Security fix for GHSA-mjmj-j48q-9wg2 applied in: cassandra-fips 4.0.19-r2, cassandra-fips 4.1.10-r1, cassandra-reaper-fips 3.6.1-r3, s3proxy 3.3.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, stargate 2.0.44-r4

GHSA-mjmj-j48q-9wg2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RR66440 Security fix for CVE-2023-3635 applied in: s3proxy 3.3.0-r1, stargate 2.0.44-r4, thingsboard 4.3.0.1-r2

CVE-2023-3635 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JK31874 Security fix for CVE-2021-0341 applied in: s3proxy 3.3.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, stargate 2.0.44-r4

CVE-2021-0341 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GW94479 Security fix for GHSA-w33c-445m-f8w7 applied in: s3proxy 3.3.0-r1, stargate 2.0.44-r4

GHSA-w33c-445m-f8w7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZD25264 Security fix for GHSA-3cqm-mf7h-prrj applied in: s3proxy 3.3.0-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, stargate 2.0.44-r4

GHSA-3cqm-mf7h-prrj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, kafka-bridge, conductor-fips, commercial-elasticsearch, strimzi-kafka-operator-fips, apache-pulsar, neo4j, zipkin, grpc-java-fips, cassandra, management-api-for-apache-cassandra-5.0, cloudwatch-exporter, wavefront-proxy, cassandra-fips, reposilite,...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, kafka-bridge, conductor-fips, commercial-elasticsearch, strimzi-kafka-operator-fips, apache-pulsar, neo4j, zipkin, grpc-java-fips, cassandra, management-api-for-apache-cassandra-5.0, cloudwatch-exporter, wavefront-proxy, cassandra-fips, reposilite,...

CLEANSTART-2026-FV79231 Netty is a network application framework for development of protocol servers and clients

Multiple security vulnerabilities affect the s3proxy package. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-LB41442 Security fixes for CVE-2021-0341, CVE-2022-1471, CVE-2023-3635, CVE-2025-67735, CVE-2026-33870, CVE-2026-33871, CVE-2026-41417, CVE-2026-42578, CVE-2026-42579, CVE-2026-42580, CVE-2026-42581, CVE-2026-42583, CVE-2026-42584, CVE-2026-42585, CVE-2026-42587, CVE-2026-44249, CVE-2026-45416, CVE-2026-45536, CVE-2026-45673, CVE-2026-45674, CVE-2026-47244, CVE-2026-47691, CVE-2026-48043, CVE-2026-50010, CVE-2026-50020, CVE-2026-50560, CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-38f8-5428-x5cv, ghsa-3cqm-mf7h-prrj, ghsa-3qp7-7mw8-wx86, ghsa-45q3-82m4-75jr, ghsa-563q-j3cm-6jxm, ghsa-57rv-r2g8-2cj3, ghsa-5jmj-h7xm-6q6v, ghsa-5pvg-856g-cp85, ghsa-5x3r-wrvg-rp6q, ghsa-676x-f7gg-47vc, ghsa-72hv-8253-57qq, ghsa-84h7-rjj3-6jx4, ghsa-c2gf-v879-257j, ghsa-c653-97m9-rcg9, ghsa-cm33-6792-r9fm, ghsa-f6hv-jmp6-3vwv, ghsa-hgj6-7826-r7m5, ghsa-hvcg-qmg6-jm4c, ghsa-j3rv-43j4-c7qm, ghsa-m4cv-j2px-7723, ghsa-mj4r-2hfc-f8p6, ghsa-mjmj-j48q-9wg2, ghsa-pwqr-wmgm-9rr8, ghsa-rmj7-2vxq-3g9f, ghsa-v8h7-rr48-vmmv, ghsa-w33c-445m-f8w7, ghsa-w573-9ffj-6ff9, ghsa-w9fj-cfpg-grvv, ghsa-x4gw-5cx5-pgmh, ghsa-xmv7-r254-6q78, ghsa-xxqh-mfjm-7mv9 applied in versions: 3.3.0-r1, 3.3.0-r2

Multiple security vulnerabilities affect the s3proxy package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-54515 vulnerabilities

Vulnerabilities for packages: wildfly, jenkins, apache-hop-fips, kafka-bridge, conductor-fips, commercial-elasticsearch, strimzi-kafka-operator-fips, apache-pulsar, neo4j, zipkin, confluent-kafka-jre-bcfips, confluent-kafka, cassandra, gradle, kafka-fips, management-api-for-apache-cassandra-5.0,...

GHSA-5JMJ-H7XM-6Q6V vulnerabilities

Vulnerabilities for packages: wildfly, jenkins, apache-hop-fips, kafka-bridge, conductor-fips, commercial-elasticsearch, strimzi-kafka-operator-fips, apache-pulsar, neo4j, zipkin, confluent-kafka-jre-bcfips, confluent-kafka, cassandra, gradle, kafka-fips, management-api-for-apache-cassandra-5.0,...

GHSA-3QP7-7MW8-WX86 vulnerabilities

Vulnerabilities for packages: wildfly, apache-hop-fips, kafka-bridge, commercial-elasticsearch, strimzi-kafka-operator-fips, apache-pulsar, neo4j, zipkin, grpc-java-fips, cassandra, management-api-for-apache-cassandra-5.0, wavefront-proxy, cassandra-fips, reposilite, thingsboard, kafbat-ui,...

CVE-2026-44249 vulnerabilities

Vulnerabilities for packages: wildfly, apache-hop-fips, kafka-bridge, commercial-elasticsearch, strimzi-kafka-operator-fips, apache-pulsar, neo4j, zipkin, grpc-java-fips, cassandra, management-api-for-apache-cassandra-5.0, wavefront-proxy, cassandra-fips, reposilite, thingsboard, kafbat-ui,...

EUVD-2025-0217

Malicious code in bioql PyPI...

CVE-2025-24961

org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this...

CVE-2025-24961

org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this...

CVE-2025-24961

org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this...

CVE-2025-24961 Insecure path traversal in filesystem and filesystem-nio2 storage backends in org.gaul S3Proxy

org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this...

CVE-2025-24961

CVE-2025-24961 affects org.gaul S3Proxy and describes an insecure path traversal in the filesystem and filesystem-nio2 storage backends that could unintentionally expose local files to users. The root cause is a path traversal flaw when using those backends, enabling access to files outside the i...

CVE-2025-24961 Insecure path traversal in filesystem and filesystem-nio2 storage backends in org.gaul S3Proxy

org.gaul S3Proxy implements the S3 API and proxies requests. Users of the filesystem and filesystem-nio2 storage backends could unintentionally expose local files to users. This issue has been addressed in version 2.6.0. Users are advised to upgrade. There are no known workarounds for this...