CLEANSTART-2026-OJ15594 Axios is a promise-based HTTP client for the browser and Node

Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...

CLEANSTART-2026-TR55390 Axios is a promise-based HTTP client for the browser and Node

Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...

CLEANSTART-2026-EE74509 Security fix for GHSA-8vvx-rff5-p5rq applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HG25385 Security fix for GHSA-6vj9-mwq6-2f5v applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TR78672 Security fix for GHSA-g57g-f23g-4646 applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UX56548 Security fix for GHSA-v53p-9fqp-m79j applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-AA77700 Nodemailer is a Node

Security vulnerability affects the langfuse package. Nodemailer is a Node...

CLEANSTART-2026-VR97754 `github

Security vulnerability affects the openbao package. The github...

CLEANSTART-2026-GV65273 tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory

Security vulnerability affects the openbao package. The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory...

CLEANSTART-2026-VD48874 Nodemailer before 10

Security vulnerability affects the langfuse package. Nodemailer before 10...

CLEANSTART-2026-TF67496 nodemailer before 10

Security vulnerability affects the langfuse package. nodemailer before 10...

CLEANSTART-2026-GE40690 Nodemailer versions 9

Security vulnerability affects the langfuse package. Nodemailer versions 9...

CLEANSTART-2026-AM63007 Next

Security vulnerability affects the langfuse package. Next...

CLEANSTART-2026-QD27250 Next

Security vulnerability affects the langfuse package. Next...

CLEANSTART-2026-LV87996 Next

Security vulnerability affects the langfuse package. Next...

CLEANSTART-2026-SE76644 Next

Security vulnerability affects the langfuse package. Next...

CLEANSTART-2026-GK28473 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-CR16347 Next

Security vulnerability affects the langfuse package. Next...

CLEANSTART-2026-CA81083 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-CG59297 Next

Security vulnerability affects the langfuse package. Next...

CLEANSTART-2026-HY02778 Security fix for GHSA-vcvr-r3jv-pc5j applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SS73124 Prometheus is an open-source monitoring system and time series database

Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...

CLEANSTART-2026-AF37624 @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon

Security vulnerability affects the langfuse package. @grpc/grpc-js implements the core functionality of gRPC purely in JavaScript, without a C++ addon...

CLEANSTART-2026-MV07927 In Bouncy Castle for Java before 1

CVE-2026-18040 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-TA59206 In Bouncy Castle for Java before 1

CVE-2026-97873 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-HE64068 In Bouncy Castle for Java before 1

CVE-2026-71892 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-MO96891 In Bouncy Castle for Java before 1

CVE-2026-17508 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-LI97281 In Bouncy Castle for Java before 1

CVE-2026-71889 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-KF30791 In Bouncy Castle for Java before 1

CVE-2026-71891 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-EM43415 In Bouncy Castle for Java before 1

CVE-2026-71888 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-GT24966 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106452 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-OZ05879 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106451 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-HS68048 In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials

Security vulnerability affects the elasticsearch package. In specific scenarios involving WebSocket handshake redirects to a different origin, the Reactor Netty WebSocket client may leak credentials...

CLEANSTART-2026-XJ09918 yawkat LZ4 Java provides LZ4 compression for Java

CVE-2026-106450 affects multiple packages. yawkat LZ4 Java provides LZ4 compression for Java. See references for individual vulnerability details...

CLEANSTART-2026-ES91240 In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled

Security vulnerability affects the elasticsearch package. In specific scenarios, Reactor Netty HTTP Server may incorrectly evaluate the remote IP address when HAProxy Protocol is enabled...

CLEANSTART-2026-UA66852 In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver

Security vulnerability affects the elasticsearch package. In specific scenarios involving multiple clients with different DNS resolver configurations, Reactor Netty may incorrectly reuse a previously configured DNS resolver...

CLEANSTART-2026-TF82501 Netty versions 4

CVE-2026-89044 affects multiple packages. Netty versions 4. See references for individual vulnerability details...

CLEANSTART-2026-TV67847 OpenTelemetry-Go is the Go implementation of OpenTelemetry

Security vulnerability affects the prometheus package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...

CLEANSTART-2026-AI69794 flaw was found in Netty's HttpServerCodec

CVE-2026-93491 affects multiple packages. A flaw was found in Netty's HttpServerCodec. See references for individual vulnerability details...

CLEANSTART-2026-HN97324 Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5

CVE-2026-71290 affects multiple packages. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details...

CLEANSTART-2026-ZD82952 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-ZG54261 Security fix for GHSA-gxhx-2686-5h9g applied in: argo-cd 3.4.10-r2

Security vulnerability affects the argo-cd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-GE22690 Security fix for GHSA-w5pp-99ch-qj29 applied in: argo-cd 3.4.10-r2

Security vulnerability affects the argo-cd package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XT72047 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-AR15504 go-git is a highly extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is a highly extensible git implementation library written in pure Go...

CLEANSTART-2026-LM14651 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-LH67222 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

CLEANSTART-2026-CD37394 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-RS39844 go-git is an extensible git implementation library written in pure Go

Security vulnerability affects the argo-cd package. go-git is an extensible git implementation library written in pure Go...

CLEANSTART-2026-IS97035 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...