11796 matches found
CLEANSTART-2026-CN31177 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-PF22063 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102265 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-GM98203 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102267 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-XO84437 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102271 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-AF59744 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-103001 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-JF42627 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102270 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-FP98505 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102273 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-VH40017 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-101918 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-UK80240 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-101917 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-GJ26931 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102272 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-YX87387 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102274 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-DL13850 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102269 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-SG17271 Before apache-airflow 3
Security vulnerability affects the airflow-3 package. Before apache-airflow 3...
CLEANSTART-2026-SQ68931 In Apache Airflow before 3
Security vulnerability affects the airflow-3 package. In Apache Airflow before 3...
CLEANSTART-2026-XF88803 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102266 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-UV14417 Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI
Security vulnerability affects the airflow-3 package. Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI...
CLEANSTART-2026-ER50683 fsspec is a specification and Python implementation framework for filesystem interfaces
CVE-2026-104851 affects multiple packages. fsspec is a specification and Python implementation framework for filesystem interfaces. See references for individual vulnerability details...
CLEANSTART-2026-CG47796 Apache Airflow's secrets masker did not mask `var
Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker did not mask var...
CLEANSTART-2026-NO84858 Security fix for CVE-2026-49265 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9, airflow-3 3.2.2-r8
CVE-2026-49265 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-UF47691 Security fix for CVE-2026-49264 applied in: airflow-3 3.1.8-r13, airflow-3 3.2.1-r11, airflow-3 3.0.6-r9, airflow-3 3.2.2-r8
CVE-2026-49264 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SE75887 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102268 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-YA90278 Multidict is an implementation of a multidict data structure
CVE-2026-104874 affects multiple packages. Multidict is an implementation of a multidict data structure. See references for individual vulnerability details...
CLEANSTART-2026-UQ32467 Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` and `PATCH /api/v2/...
Security vulnerability affects the airflow-3 package. Apache Airflow wrote Variable values and Connection extra contents to the audit log in cleartext when they were submitted through the bulk endpoints PATCH /api/v2/variables and PATCH /api/v2/connections...
CLEANSTART-2026-QX32909 PyJWT is a Python implementation of JSON Web Token standards
CVE-2026-102275 affects multiple packages. PyJWT is a Python implementation of JSON Web Token standards. See references for individual vulnerability details...
CLEANSTART-2026-WB32987 denial-of-service (DoS) vulnerability exists in google
CVE-2026-0994 affects multiple packages. A denial-of-service DoS vulnerability exists in google. See references for individual vulnerability details...
CLEANSTART-2026-UI77772 Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team,...
Security vulnerability affects the airflow-3 package. Apache Airflow's asset materialization endpoint POST /api/v2/assets/assetid/materialize and the XCom result check on waitdagrununtilfinished authorized the target Dag without its team, unlike every other authorization site...
CLEANSTART-2026-QJ23828 Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie
Security vulnerability affects the airflow-3 package. Apache Airflow: the Core API logout endpoint revokes only a session token presented as the token cookie...
CLEANSTART-2026-ZG38480 Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope
Security vulnerability affects the airflow-3 package. Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope...
CLEANSTART-2026-NZ97420 Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI
Security vulnerability affects the airflow-3 package. Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI...
CLEANSTART-2026-CM94028 Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read
Security vulnerability affects the airflow-3 package. Apache Airflow's /assets/events API returned asset events for every Dag in the deployment, with no filter restricting them to the Dags the caller is authorized to read...
CLEANSTART-2026-XI09971 Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLOW__WORKERS__SECRETS_BACKEND_KWARG__SECRET...
Security vulnerability affects the airflow-3 package. The Config API in Apache Airflow surfaced per-key secrets-backend overrides environment variables like AIRFLOWSECRETSBACKENDKWARGSECRETID and AIRFLOWWORKERSSECRETSBACKENDKWARGSECRETID as synthetic config options whose option names were not in...
CLEANSTART-2026-OM50067 Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse
Security vulnerability affects the airflow-3 package. Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the backfillid path segment failed to parse...
CLEANSTART-2026-TQ39648 Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_...
Security vulnerability affects the airflow-3 package. The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based shouldhidevalueforkey check which triggers on secret-suffixed key names like password / token / secret could not fire for...
CLEANSTART-2026-ZO32580 Apache Airflow's XCom `GET /api/v2/{
Security vulnerability affects the airflow-3 package. Apache Airflow's XCom GET /api/v2/...
CLEANSTART-2026-VP80273 bug in `BaseSerialization
Security vulnerability affects the airflow-3 package. A bug in BaseSerialization...
CLEANSTART-2026-WK31572 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-ZH20233 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-WN21226 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-NI98278 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-QE81238 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-OP24127 Next
Security vulnerability affects the langfuse-worker package. Next...
CLEANSTART-2026-YJ89488 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
CLEANSTART-2026-CX61220 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-PK52336 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-DU73207 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
CLEANSTART-2026-VT81725 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...
CLEANSTART-2026-EA15585 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-MV69619 RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes
Security vulnerability affects the apache-nifi package. The RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes...