CLEANSTART-2026-BS35742 zstd-jni before 1

Security vulnerability affects the strimzi-kafka-operator package. zstd-jni before 1...

CLEANSTART-2026-JE63853 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the strimzi-kafka-operator package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-SB90321 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-CW98636 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-WN62977 Security fix for GHSA-497x-rrr9-68jp applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ED54467 Security fix for GHSA-pjcq-xvwq-hhpj applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RF10343 Security fix for GHSA-hcxc-wf8j-23hv applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ME02070 source-map-js through 1

Security vulnerability affects the renovate package. source-map-js through 1...

UBUNTU-CVE-2026-88838

A flaw was found in BusyBox's mount utility. A non-root user can bypass mount security restrictions set in /etc/fstab by specifying clearing-mask options on the command line. These options pass the non-root flag filter and are merged with fstab options as strings; when the combined options are...

CVE-2026-111235: Missing Authorization

An authorization bypass vulnerability exists in the REST API of multiple versions of OpenNMS Meridian and Horizon. The /rest/ Spring Security filter chains authorize requests with intercept-url rules that name the HTTP method as an uppercase token, compare the method case-sensitively, and have no...

Trusted Execution Environment Privilege Escalation

The vulnerability of the trusted execution environment for Virtualization-Based Security VBS in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2026-110374: Missing Authorization

Missing Authorization vulnerability in Hamid Alinia Login with phone number login-with-phone-number allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login with phone number: from n/a through 1.8.77...

CVE-2026-109709

Information disclosure, privilege escalation in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2025-68404: Time-of-check Time-of-use (TOCTOU) Race Condition

A time-of-check time-of-use toctou race condition vulnerability has been reported to affect QuRouter. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.6.4.001 and lat...

CVE-2026-53882: Improper Link Resolution Before File Access

An improper link resolution before file access 'link following' vulnerability has been reported to affect Virtualization Station. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in...

CVE-2026-18659: Incorrect Authorization

In Eclipse Jetty, across various versions of jetty-security, and jetty-eeN-security, and jetty-eeN-servlet, the Jakarta Spec constraints defined as http-method-omission can be bypassed by using substrings of the defined HTTP Methods...

UBUNTU-CVE-2026-18661

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

CVE-2026-18661: Incorrect Authorization

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

CVE-2026-18661

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...

PT-2026-114860

In Eclipse Jetty, across various versions of jetty-annotations, and jetty-eeN-annotations, the Jakarta Spec authoritative url-pattern rules for mixed @ServletSecurity annotation, and web.xml defined security-constraint on the same url-pattern were not being applied if the web.xml had more than 1...