2104565 matches found
CLEANSTART-2026-MR78444 UTF8DataInputJsonParser
Security vulnerability affects the apache-nifi package. UTF8DataInputJsonParser...
CLEANSTART-2026-MS81723 NumberInput
Security vulnerability affects the apache-nifi package. NumberInput...
CLEANSTART-2026-DY58341 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
Security vulnerability affects the apache-nifi package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID...
CLEANSTART-2026-YN27017 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion
CVE-2026-56859 affects multiple packages. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. See references for individual vulnerability details...
CLEANSTART-2026-UB80318 Security fix for ghsa-gcjh-h69q-9w9g applied in: kube-state-metrics 2.19.1-r3, kube-state-metrics 2.17.0-r6, kube-state-metrics 2.18.0-r9
ghsa-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-RR86814 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...
CLEANSTART-2026-UW01698 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer
CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...
CLEANSTART-2026-PA97318 Security fix for ghsa-hrxh-6v49-42gf applied in: kube-state-metrics 2.19.1-r1, kube-state-metrics 2.20.0-r0, kube-state-metrics 2.18.0-r7
ghsa-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-JF16968 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
CVE-2026-33818 affects multiple packages. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
CLEANSTART-2026-LN60743 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-41178 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-SH40578 Previously, resolving relative paths containing parent directory ('
CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...
CLEANSTART-2026-ZC94506 Previously, a channel registered in the mux's chanList is not usable until it is established
CVE-2026-78662 affects multiple packages. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
CLEANSTART-2026-PM29694 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-FD89775 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-CR77142 Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection
CVE-2026-56855 affects multiple packages. Previously, after a channel has been established, a malicious peer could send crafted messages that would deadlock the entire connection. See references for individual vulnerability details...
CLEANSTART-2026-GM47441 norm
Security vulnerability affects the kube-state-metrics package. A norm...
CLEANSTART-2026-DS09618 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the prometheus-operator package. gRPC-Go is the Go language implementation of gRPC...
MAL-2026-17168 Malicious code in vercel-runtime-python (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 5bd13c006fe4fbaf8bb81d068f6e3c822ea1e664b24d0045370aead862ccd06f Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
DEBIAN-CVE-2026-42394
Bulletin has no description...
DEBIAN-CVE-2026-92288
Bulletin has no description...
DEBIAN-CVE-2026-95811
Bulletin has no description...
DEBIAN-CVE-2026-92289
Bulletin has no description...
MAL-2026-17167 Malicious code in prosocks (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 a1ca37b881f19975a8ab8b23bd5e69b51355333374385aabfc5784b69bf95545 The package automatically joins the machine to a proxy network. Depending on the version, it can happen during the package installation or when importing the...
CGA-5WWH-MH9P-2P27
Bulletin has no description...
CGA-PJ8M-2WJP-JGH7
Bulletin has no description...
MINI-PW28-HG3R-7QMV
Bulletin has no description...
MINI-4H7V-V4VQ-C79W
Bulletin has no description...
MINI-9GP6-5PG5-QQWH
Bulletin has no description...
CGA-V38C-CXXH-3HM4
Bulletin has no description...
ECHO-B9A3-69E9-2A9F
Bulletin has no description...
MINI-6C6M-WXPF-XCC6
Bulletin has no description...
MINI-6M52-RPPF-4X5X
Bulletin has no description...
MINI-X7CR-8MVQ-HVRQ
Bulletin has no description...
MINI-55C8-86J5-32Q9
Bulletin has no description...
MINI-66GX-6PHF-C2C5
Bulletin has no description...
MINI-X64C-364G-PHH6
Bulletin has no description...
MINI-6VGC-VXRP-VQWW
Bulletin has no description...
MINI-WH6H-H3HR-QF48
Bulletin has no description...
MINI-58VX-VG5X-PHV7
Bulletin has no description...
MINI-R47R-4R74-JC55
Bulletin has no description...
MINI-4JC9-F7M2-FJP9
Bulletin has no description...
MINI-MXRG-3QGX-725W
Bulletin has no description...
MINI-33P3-2WQJ-F7GJ
Bulletin has no description...
MINI-QVJJ-2448-P2M6
Bulletin has no description...
MINI-FMG9-RPW9-73GW
Bulletin has no description...
MINI-87MV-QC28-6X69
Bulletin has no description...
MINI-F76Q-4G4F-74X9
Bulletin has no description...
MINI-HWJQ-2QR8-JGV3
Bulletin has no description...