26304 matches found
Updated libssh packages fix security vulnerabilities
CVE-2025-4877 Write beyond bounds in binary to base64 conversion functions CVE-2025-4878 Use of uninitialized variable in privatekeyfromfile CVE-2025-5318 Likely read beyond bounds in sftp server handle management CVE-2025-5351 Double free in functions exporting keys CVE-2025-5372 sshkdf returns ...
CLEANSTART-2026-ZL51442 When returning errors, functions in the net/textproto package would include its input as part of the error
Multiple security vulnerabilities affect the minio-operator package. When returning errors, functions in the net/textproto package would include its input as part of the error. See references for individual vulnerability details...
CLEANSTART-2026-FT24360 Flask is a web server gateway interface (WSGI) web application framework
Multiple security vulnerabilities affect the apache-superset package. Flask is a web server gateway interface WSGI web application framework. See references for individual vulnerability details...
CLEANSTART-2026-GZ11549 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations
Multiple security vulnerabilities affect the certificate-transparency-trillian-ctserver package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations. See references for individual vulnerability details...
CLEANSTART-2026-HN49173 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Multiple security vulnerabilities affect the prometheus-operator package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...
CLEANSTART-2026-RF77222 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the wave package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-EU52554 In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files
Multiple security vulnerabilities affect the gostatsd package. In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files. See references for individual vulnerability details...
CLEANSTART-2026-JN91167 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Multiple security vulnerabilities affect the prometheus-operator package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...
CLEANSTART-2026-HM14899 url
Multiple security vulnerabilities affect the descheduler package. url. See references for individual vulnerability details...
CLEANSTART-2026-LA96053 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
Multiple security vulnerabilities affect the wave package. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-EM89202 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Multiple security vulnerabilities affect the cass-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-LX00456 url
Multiple security vulnerabilities affect the dynamic-localpv-provisioner package. url. See references for individual vulnerability details...
CLEANSTART-2026-EN66750 Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing
Multiple security vulnerabilities affect the apache-superset package. Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. See references for individual vulnerability...
CLEANSTART-2026-JR82778 Netty is an asynchronous, event-driven network application framework
Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-BD44609 On Unix platforms, when listing the contents of a directory using File
Multiple security vulnerabilities affect the dcgm-exporter package. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...
MGASA-2026-0185 Updated minetest packages fix security vulnerabilities
Mod security sandbox escape. CVE-2026-40959 HTTP API and insecure environment access control bypass. CVE-2026-40960...
Updated wireshark packages fix security vulnerabilities
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code. This update fixes the reported issue...
MGASA-2026-0184 Updated wireshark packages fix security vulnerabilities
Multiple vulnerabilities have been discovered in Wireshark, a network protocol analyzer, which could result in denial of service or the execution of arbitrary code. This update fixes the reported issue...
CLEANSTART-2026-LB01734 Netty is an asynchronous, event-driven network application framework
Multiple security vulnerabilities affect the apache-zookeeper package. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...