11796 matches found
CLEANSTART-2026-RH44885 Alertmanager handles alerts sent by client applications such as the Prometheus server
Security vulnerability affects the grafana package. Alertmanager handles alerts sent by client applications such as the Prometheus server...
CLEANSTART-2026-ZA90599 Security fix for CVE-2026-49265 applied in: k8s-sidecar 2.8.2-r1
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OX34995 urllib3 is an HTTP client library for Python
Security vulnerability affects the k8s-sidecar package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-SV74760 vm2 is an open source vm/sandbox for Node
Security vulnerability affects the n8n package. vm2 is an open source vm/sandbox for Node...
CLEANSTART-2026-RL65509 vm2 is a sandbox for running untrusted Node
Security vulnerability affects the n8n package. vm2 is a sandbox for running untrusted Node...
CLEANSTART-2026-LI48838 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-ZC70101 vm2 before 3
Security vulnerability affects the n8n package. vm2 before 3...
CLEANSTART-2026-CF02971 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
Security vulnerability affects the argo-cd package. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595...
CLEANSTART-2026-IK18722 specially crafted request could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted request could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11
Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...
CLEANSTART-2026-AO34403 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com
Security vulnerability affects the apache-hive package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...
CLEANSTART-2026-NC17726 fast-uri is a URI parser for Node
Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...
CLEANSTART-2026-LZ14873 Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability
Security vulnerability affects the apache-nifi-registry package. Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwtDecoderFactory contains a cache-based replay attack vulnerability...
CLEANSTART-2026-GA54937 zstd-jni versions before 1
CVE-2026-87877 affects multiple packages. zstd-jni versions before 1. See references for individual vulnerability details...
CLEANSTART-2026-XZ10656 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CLEANSTART-2025-ZP95072 bluemonday before 1
Security vulnerability affects the gitea package. bluemonday before 1...
CLEANSTART-2023-LH87514 issue was discovered in Freeware Advanced Audio Decoder 2 (FAAD2) 2
Security vulnerability affects the faad2 package. An issue was discovered in Freeware Advanced Audio Decoder 2 FAAD2 2...
CLEANSTART-2026-TJ01241 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
Security vulnerability affects the cri-tools package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate...
CLEANSTART-2026-FZ80823 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
CVE-2026-56864 affects multiple packages. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log. See references for individual vulnerability details...
CLEANSTART-2024-UY34199 flaw was found in Blender 3
Security vulnerability affects the blender package. A flaw was found in Blender 3...
CLEANSTART-2024-AJ31493 flaw was found in Blender 3
Security vulnerability affects the blender package. A flaw was found in Blender 3...
CLEANSTART-2026-PU50619 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not
Security vulnerability affects the minio-operator package. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not...
CLEANSTART-2026-GN07707 Previously, resolving relative paths containing parent directory ('
Security vulnerability affects the minio-operator package. Previously, resolving relative paths containing parent directory '...
CLEANSTART-2026-TO10251 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the minio-operator package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
CLEANSTART-2026-WR14423 undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still ...
Security vulnerability affects the langfuse package. undici bundles a WebSocket client whose permessage-deflate size-limit cleanup removes all listeners from the internal zlib inflate stream, including its error listener, while that stream can still emit...
CLEANSTART-2026-US73537 undici's setCookie function does not fully sanitize cookie attributes
Security vulnerability affects the langfuse package. undici's setCookie function does not fully sanitize cookie attributes...
CLEANSTART-2026-ZY12459 undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive
Security vulnerability affects the langfuse package. undici's cache interceptor mishandles optional whitespace placed around the equals sign of a qualified no-cache or private Cache-Control directive...
CLEANSTART-2026-BZ98480 undici's experimental WebSocketStream client crashes the whole Node
Security vulnerability affects the langfuse package. undici's experimental WebSocketStream client crashes the whole Node...
CLEANSTART-2026-LZ46216 fast-uri is a URI parser for Node
Security vulnerability affects the langfuse package. fast-uri is a URI parser for Node...
CLEANSTART-2026-NP94260 flaw in Node
Security vulnerability affects the apache-superset package. A flaw in Node...
CLEANSTART-2026-QE83789 Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments
Security vulnerability affects the apache-hive package. Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments...
CLEANSTART-2026-TS74004 Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason
Security vulnerability affects the apache-hive package. A Spring WebFlux application that supports WebSocket connections may expose indirectly sensitive user information by including request headers in an exception reason...
CLEANSTART-2026-JK79354 Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect
Security vulnerability affects the apache-hive package. A Spring MVC application that uses UrlFileNameViewController that is mapped with an end-of-path, and does not have a configured prefix is vulnerable to an open redirect...
CLEANSTART-2026-HS17717 Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events (SSE)
Security vulnerability affects the apache-hive package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...
CLEANSTART-2026-TI66876 Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5
CVE-2026-71290 affects multiple packages. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details...
CLEANSTART-2026-QN85900 Picomatch is a glob matcher written JavaScript
Security vulnerability affects the argo-workflows package. Picomatch is a glob matcher written JavaScript...
CLEANSTART-2026-XS33213 shell-quote prior to 1
Security vulnerability affects the argo-workflows package. shell-quote prior to 1...
CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1
Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...
CLEANSTART-2026-YT66630 webpack-dev-server allows users to use webpack with a development server that provides live reloading
Security vulnerability affects the argo-workflows package. webpack-dev-server allows users to use webpack with a development server that provides live reloading...
CLEANSTART-2026-BI32681 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLEANSTART-2026-PH11243 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
Security vulnerability affects the k8s-sidecar package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels...
CLEANSTART-2026-BJ90324 Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4
Security vulnerability affects the spark-sc212-jdk17-py311 package. Server-Side Request Forgery SSRF in Avro SerDe schema resolution in Apache Hive before 4...
CLEANSTART-2026-IP93838 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-PR31494 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute
Security vulnerability affects the loki package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...
CLEANSTART-2026-QP25328 malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation
Security vulnerability affects the loki package. A malicious module proxy can exploit a flaw in the go command's validation of module checksums to bypass checksum database validation...
CLEANSTART-2026-MS81723 NumberInput
Security vulnerability affects the apache-nifi package. NumberInput...
CLEANSTART-2026-YT03662 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-MB62550 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84303 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-TR09708 Security fix for GHSA-8wmf-6v46-5gfg applied in: rabbitmq-cluster-operator 2.21.1-r6
Security vulnerability affects the rabbitmq-cluster-operator package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-GB37349 flaw was found in the admin REST API of Keycloak, a solution for identity and access management
Security vulnerability affects the keycloak package. A flaw was found in the admin REST API of Keycloak, a solution for identity and access management...