CLEANSTART-2026-XD01399 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

CLEANSTART-2026-EE95279 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

CLEANSTART-2026-QG98494 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

CLEANSTART-2026-BF25173 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

CLEANSTART-2026-HS78493 Pydantic AI is a Python agent framework for building applications and workflows with Generative AI

Security vulnerability affects the py3-pydantic-ai package. Pydantic AI is a Python agent framework for building applications and workflows with Generative AI...

CLEANSTART-2026-KS25235 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello

CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...

CLEANSTART-2026-VM44907 Security fix for GHSA-mhm7-754m-9p8w applied in: strimzi-kafka-operator 0.51.0-r4, kafka 4.2.0-r5

GHSA-mhm7-754m-9p8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC21815 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

CVE-2026-59889 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...

CLEANSTART-2026-WY72170 jackson-databind binds a JSON string to a javax

CVE-2026-68497 affects multiple packages. jackson-databind binds a JSON string to a javax. See references for individual vulnerability details...

CLEANSTART-2026-NQ89106 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

CVE-2026-54515 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...

CLEANSTART-2026-HZ51336 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator

CVE-2026-83557 affects multiple packages. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details...

CLEANSTART-2026-KO81202 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes

Security vulnerability affects the kafka package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...

CLEANSTART-2026-BG17653 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)

Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...

CLEANSTART-2026-LO54000 In Eclipse Jetty, a first HTTP/1

Security vulnerability affects the kafka package. In Eclipse Jetty, a first HTTP/1...

CLEANSTART-2026-UF96774 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the kafka package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-ZO93584 In Eclipse Jetty, an HTTP URI of this form: /public;/

Security vulnerability affects the kafka package. In Eclipse Jetty, an HTTP URI of this form: /public;/...

CLEANSTART-2026-OJ07374 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-DQ63138 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-OG12992 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-ED66251 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor

Security vulnerability affects the strimzi-kafka-operator package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...

CLEANSTART-2026-AS15122 Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform

Security vulnerability affects the strimzi-kafka-operator package. Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform...

CLEANSTART-2026-BD93635 It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service (DoS) condition due to an unbounded memory leak

Security vulnerability affects the strimzi-kafka-operator package. It is possible for outbound HTTP requests using a Micrometer-instrumented client to cause a denial-of-service DoS condition due to an unbounded memory leak...

CLEANSTART-2026-SD29232 Out-of-bounds memory operations in org

Security vulnerability affects the strimzi-kafka-operator package. Out-of-bounds memory operations in org...

CLEANSTART-2026-DU71733 zstd-jni versions 1

CVE-2026-89046 affects multiple packages. zstd-jni versions 1. See references for individual vulnerability details...

CLEANSTART-2026-BS35742 zstd-jni before 1

Security vulnerability affects the strimzi-kafka-operator package. zstd-jni before 1...

CLEANSTART-2026-JE63853 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the strimzi-kafka-operator package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-UR93558 zstd-jni versions before 1

CVE-2026-87795 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...

CLEANSTART-2026-SB90321 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-EN44130 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API

CVE-2026-45292 affects multiple packages. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. See references for individual vulnerability details...

CLEANSTART-2026-EB50252 TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e

Security vulnerability affects the strimzi-kafka-operator package. A TCP client can perform a TLS handshake and present the server name extension with a server name that is accepted by a server wildcard name, e...

CLEANSTART-2026-WG41098 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com

Security vulnerability affects the strimzi-kafka-operator package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...

CLEANSTART-2026-NB67850 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-YC22300 Netty (io

Security vulnerability affects the strimzi-kafka-operator package. Netty io...

CLEANSTART-2026-CW98636 In Eclipse Vert

Security vulnerability affects the strimzi-kafka-operator package. In Eclipse Vert...

CLEANSTART-2026-ZM65468 Netty is a network application framework for development of protocol servers and clients

CVE-2026-45536 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-BB34583 Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4

Security vulnerability affects the strimzi-kafka-operator package. Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4...

CLEANSTART-2026-DD70897 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-WE03470 Uncontrolled Recursion vulnerability in Apache Commons Lang

Security vulnerability affects the strimzi-kafka-operator package. Uncontrolled Recursion vulnerability in Apache Commons Lang...

CLEANSTART-2026-FP82534 Netty is an asynchronous, event-driven network application framework

Security vulnerability affects the strimzi-kafka-operator package. Netty is an asynchronous, event-driven network application framework...

CLEANSTART-2026-BR61448 race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics

Security vulnerability affects the strimzi-kafka-operator package. A race condition in the Apache Kafka Java producer client’s buffer pool management can cause messages to be silently delivered to incorrect topics...

CLEANSTART-2026-JO59032 Echo is a Go web framework

Security vulnerability affects the temporal-server-fips package. Echo is a Go web framework...

CLEANSTART-2026-GN57450 Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PHP and Java bindings

CVE-2026-43871 affects multiple packages. Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in Apache Thrift Python, Go, PHP and Java bindings. See references for individual vulnerability details...

CLEANSTART-2026-PN08299 Security fix for GHSA-vffh-x6r8-xx99 applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-WN62977 Security fix for GHSA-497x-rrr9-68jp applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ED54467 Security fix for GHSA-pjcq-xvwq-hhpj applied in: grafana-fips 13.0.1-r0

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FV65600 Security fix for GHSA-jpcw-4wr7-c3vq applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-YF58790 Security fix for GHSA-r277-6w6q-xmqw applied in: grafana-fips 13.1.0-r1

Security vulnerability affects the grafana-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FG42108 OpenTelemetry-Go is the Go implementation of OpenTelemetry

CVE-2026-41178 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...

CLEANSTART-2026-IC81129 OpenFGA is an authorization/permission engine built for developers

Security vulnerability affects the grafana-fips package. OpenFGA is an authorization/permission engine built for developers...

CLEANSTART-2026-SL23707 pgx is a PostgreSQL driver and toolkit for Go

CVE-2026-41889 affects multiple packages. pgx is a PostgreSQL driver and toolkit for Go. See references for individual vulnerability details...