11796 matches found
CLEANSTART-2024-DF56851 In FFmpeg 4
Security vulnerability affects the ffmpeg4 package. In FFmpeg 4...
CLEANSTART-2024-XU01734 decode_frame in libavcodec/exr
Security vulnerability affects the ffmpeg4 package. decodeframe in libavcodec/exr...
CLEANSTART-2024-JC18664 Policy bypass in COOP in Google Chrome prior to 98
Security vulnerability affects the chromium package. Policy bypass in COOP in Google Chrome prior to 98...
CLEANSTART-2023-WW67500 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2
Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...
CLEANSTART-2023-YY56914 invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbr_dec
Security vulnerability affects the faad2 package. An invalid memory address dereference was discovered in the sbrDecodeSingleFramePS function of libfaad/sbrdec...
CLEANSTART-2023-FZ67908 NULL pointer dereference was discovered in sbr_process_channel of libfaad/sbr_dec
Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in sbrprocesschannel of libfaad/sbrdec...
CLEANSTART-2023-HR33232 NULL pointer dereference was discovered in ic_predict of libfaad/ic_predict
Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in icpredict of libfaad/icpredict...
CLEANSTART-2023-VR99573 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2
Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...
CLEANSTART-2023-VH05257 invalid memory address dereference was discovered in the sbr_process_channel function of libfaad/sbr_dec
Security vulnerability affects the faad2 package. An invalid memory address dereference was discovered in the sbrprocesschannel function of libfaad/sbrdec...
CLEANSTART-2023-DO62878 NULL pointer dereference was discovered in ifilter_bank of libfaad/filtbank
Security vulnerability affects the faad2 package. A NULL pointer dereference was discovered in ifilterbank of libfaad/filtbank...
CLEANSTART-2024-YI47904 report_vbuild in report
Security vulnerability affects the fetchmail package. reportvbuild in report...
CLEANSTART-2025-MG51423 HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023
CVE-2023-44487 affects multiple packages. The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. See references for individual vulnerability details...
CLEANSTART-2026-HP71482 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the cri-tools package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-HP85044 spdystream is a Go library for multiplexing streams over SPDY connections
CVE-2026-35469 affects multiple packages. spdystream is a Go library for multiplexing streams over SPDY connections. See references for individual vulnerability details...
CLEANSTART-2026-PL94535 On Unix platforms, when listing the contents of a directory using File
Security vulnerability affects the cri-tools package. On Unix platforms, when listing the contents of a directory using File...
CLEANSTART-2026-DU09908 BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner
Security vulnerability affects the docker-cli-buildx package. BuildKit is a toolkit for converting source code to build artifacts in an efficient, expressive and repeatable manner...
CLEANSTART-2026-OE45196 compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, ...
Security vulnerability affects the docker-cli-buildx package. The compiler is meant to unwrap pointers which are the operands of a memory move; a no-op interface conversion prevented the compiler from making the correct determination about non-overlapping moves, potentially leading to memory...
CLEANSTART-2024-OD86351 When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by ...
Security vulnerability affects the dnsdist package. When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer AXFR or IX...
CLEANSTART-2024-HW06037 issue was discovered in MIT Kerberos 5 (aka krb5) through 1
Security vulnerability affects the krb5 package. An issue was discovered in MIT Kerberos 5 aka krb5 through 1...
CLEANSTART-2024-BH94102 flaw was found in samba's Heimdal KDC implementation, versions 4
Security vulnerability affects the heimdal package. A flaw was found in samba's Heimdal KDC implementation, versions 4...
CLEANSTART-2024-EO56107 Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 (aka krb5) before 1
Security vulnerability affects the krb5 package. A Reachable Assertion issue was discovered in the KDC in MIT Kerberos 5 aka krb5 before 1...
CLEANSTART-2024-IW99789 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service
Security vulnerability affects the nghttp2 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service...
CLEANSTART-2024-GP69623 fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp
Security vulnerability affects the heimdal package. The fix for CVE-2022-3437 included changing memcmp to be constant time and a workaround for a compiler bug by adding "!= 0" comparisons to the result of memcmp...
CLEANSTART-2026-CS99408 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...
CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...
CLEANSTART-2026-XE09130 Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination aft...
Security vulnerability affects the apache-nifi package. Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login...
CLEANSTART-2026-TV66074 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs
Security vulnerability affects the kube-state-metrics-fips package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
CLEANSTART-2026-HN45424 Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh
Security vulnerability affects the kube-state-metrics-fips package. The Verify method for FIDO/U2F security key types sk-ecdsa-sha2-nistp256@openssh...
CLEANSTART-2026-PF53070 On Unix platforms, when listing the contents of a directory using File
CVE-2026-27139 affects multiple packages. On Unix platforms, when listing the contents of a directory using File. See references for individual vulnerability details...
CLEANSTART-2026-LC87549 Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service
Security vulnerability affects the containerd package. Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service...
CLEANSTART-2026-ZQ25386 Downloading and building modules with malicious version strings can cause local code execution
Security vulnerability affects the coredns package. Downloading and building modules with malicious version strings can cause local code execution...
CLEANSTART-2026-ZZ46372 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Security vulnerability affects the buildkitd package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate...
CLEANSTART-2024-WH54891 Sensitive data could be exposed in world readable logs of cloud-init before version 22
Security vulnerability affects the cloud-init package. Sensitive data could be exposed in world readable logs of cloud-init before version 22...
CLEANSTART-2024-XJ51471 flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers
Security vulnerability affects the buildah package. A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers...
CLEANSTART-2024-UY34199 flaw was found in Blender 3
Security vulnerability affects the blender package. A flaw was found in Blender 3...
CLEANSTART-2024-AJ31493 flaw was found in Blender 3
Security vulnerability affects the blender package. A flaw was found in Blender 3...
CLEANSTART-2026-WG16453 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...
CLEANSTART-2026-DE66798 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
Security vulnerability affects the minio-operator package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
CLEANSTART-2026-US73537 undici's setCookie function does not fully sanitize cookie attributes
Security vulnerability affects the langfuse package. undici's setCookie function does not fully sanitize cookie attributes...
CLEANSTART-2026-TI91814 undici's retry handler can leave an already-exposed response body pending forever
Security vulnerability affects the langfuse package. undici's retry handler can leave an already-exposed response body pending forever...
CLEANSTART-2026-BZ98480 undici's experimental WebSocketStream client crashes the whole Node
Security vulnerability affects the langfuse package. undici's experimental WebSocketStream client crashes the whole Node...
CLEANSTART-2026-NP94260 flaw in Node
Security vulnerability affects the apache-superset package. A flaw in Node...
CLEANSTART-2026-MI22504 flaw in Node
Security vulnerability affects the apache-superset package. A flaw in Node...
CLEANSTART-2026-FN35430 Issue summary: Processing a malformed PKCS#12 file can trigger a NULL pointer dereference in the PKCS12_item_decrypt_d2i_ex() function
Security vulnerability affects the apache-superset package. Issue summary: Processing a malformed PKCS12 file can trigger a NULL pointer dereference in the PKCS12itemdecryptd2iex function...
CLEANSTART-2026-ML04549 Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check
Security vulnerability affects the apache-hive package. Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check...
CLEANSTART-2026-MZ33445 When audit logging is enabled (zookeeper
Security vulnerability affects the apache-hive package. When audit logging is enabled zookeeper...
CLEANSTART-2026-IG77090 yawkat LZ4 Java provides LZ4 compression for Java
CVE-2026-59949 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...
CLEANSTART-2026-KR26174 unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",
Security vulnerability affects the apache-hive package. An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted addauth"ensemble",...
CLEANSTART-2026-LT41646 WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request
Security vulnerability affects the apache-hive package. A WebFlux application using functional endpoints and deployed with DispatcherServlet may be vulnerable to a header predicate bypass in a pre-flight request...
CLEANSTART-2026-QW68592 Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit
Security vulnerability affects the apache-hive package. A Spring WebFlux application that relies on the Aalto XML processor to parse XML input does not correctly enforce the maxInMemorySize limit...