CLEANSTART-2026-WA75258 Security fix for ghsa-3677-xxcr-wjqv applied in: apache-nifi 2.7.2-r0, confluent-common-docker 7.6.9-r2, kafka 4.0.1-r0, kafka-fips 4.0.1-r0, kafka-fips 4.0.1-r1, schema-registry 7.7.7-r0

ghsa-3677-xxcr-wjqv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QB24702 Security fix for CVE-2025-5115 applied in: schema-registry 7.7.8-r0, schema-registry 7.9.6-r0, solr 9.8.1-r1

CVE-2025-5115 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VE14203 Security fix for CVE-2026-42778 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0

CVE-2026-42778 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NP40407 Security fix for CVE-2026-41635 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0

CVE-2026-41635 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TW68180 Security fix for CVE-2026-41409 applied in: apache-nifi 2.7.2-r7, apache-nifi 2.9.0-r1, schema-registry 7.9.6-r0, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0

CVE-2026-41409 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

PT-2026-95650

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description pg partman is a PostgreSQL extension used for managing partitioned tables by time or ID. The functions drop partition id and drop partition time utilize part config.retention schema as the target...

PT-2026-95377

Name of the Vulnerable Software and Affected Versions ArcadeDB versions prior to 26.9.1 Description The polyglot script sandbox contains an incomplete deny-list within com.arcadedb.query.polyglot.HostClassLookupFilter.DENIED. While java.util.ResourceBundle is listed, the filter uses exact equalit...

CVE-2026-92756

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756

This vulnerability affects the MongoDB Entity Framework Core Provider . Applications that combine independent encryption settings with the provider's own encryption settings may silently lose TLS and schema-map settings , causing protected fields to be stored unencrypted in the database. The flaw...

CVE-2026-92756 Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

EUVD-2026-82377

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756 Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

CVE-2026-92756 Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

Combining encryption settings may disable encryption

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

BIT-MONGODB-2026-82058 Unhandled Exception in MongoDB Server JSON Schema Validation Error Generation Leads to Denial of Service

A flaw in MongoDB's JSON Schema validation error generation code allows an authenticated user with readWrite privileges to crash the mongod server. When a BSON document containing an array with a malformed numeric field name fails a $jsonSchema items type constraint, the error generation path...

CVE-2026-92756: Missing Encryption of Sensitive Data

Applications built on MongoDB Entity Framework Core Provider which combine independent encryption settings and this provider's encryption settings may silently lose TLS and schema-map settings leading to protected fields being stored unencrypted in the database...

PT-2026-95072

Name of the Vulnerable Software and Affected Versions MongoDB Entity Framework Core Provider affected versions not specified Description Applications using this provider that combine independent encryption settings with the provider's own encryption settings may silently lose TLS Transport Layer...

CVE-2026-27553

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2026-27553 Information Disclosure via Schema Path Manipulation

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...

CVE-2026-27553 Information Disclosure via Schema Path Manipulation

A low-privileged remote attacker can manipulate the schema path parameter in the /index.php/diagnosticstab/ajaxdiagtablerows endpoint using a valid user cookie allowing disclosure of all user password hashes...