11796 matches found
CLEANSTART-2026-NF46642 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Security vulnerability affects the victoria-metrics package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
CLEANSTART-2026-TQ95555 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened
Security vulnerability affects the victoria-metrics package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...
CLEANSTART-2026-BB23669 When returning errors, functions in the net/textproto package would include its input as part of the error
Security vulnerability affects the victoria-metrics package. When returning errors, functions in the net/textproto package would include its input as part of the error...
CLEANSTART-2026-QM27713 Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component
Security vulnerability affects the ollama-fips package. Matching of hosts against proxy patterns can improperly treat an IPv6 zone ID as a hostname component...
CLEANSTART-2026-OL43911 html
Security vulnerability affects the ollama-fips package. The html...
CLEANSTART-2026-KY85414 (*x509
Security vulnerability affects the victoria-metrics package. x509...
CLEANSTART-2026-US20242 html
Security vulnerability affects the ollama-fips package. The html...
CLEANSTART-2026-RO28104 malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go ...
Security vulnerability affects the syft package. A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache...
CLEANSTART-2026-TM97925 tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing
Security vulnerability affects the ollama-fips package. The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character / as self-closing...
CLEANSTART-2026-BH69902 malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log
Security vulnerability affects the syft package. A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log...
CLEANSTART-2026-LO42693 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-HA58928 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-RY70674 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-UL53723 go-git is an extensible git implementation library written in pure Go
Security vulnerability affects the external-secrets-operator package. go-git is an extensible git implementation library written in pure Go...
CLEANSTART-2026-VP76604 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-ON16663 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-DF92501 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-CQ05978 containerd is an open-source container runtime
Security vulnerability affects the syft package. containerd is an open-source container runtime...
CLEANSTART-2026-QV38909 go-git is an extensible git implementation library written in pure Go
Security vulnerability affects the external-secrets-operator package. go-git is an extensible git implementation library written in pure Go...
CLEANSTART-2026-AR39396 Security fix for GHSA-f6x5-jh6r-wrfv applied in: gcp-compute-persistent-disk-csi-driver 1.22.3-r1
Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-FV50859 Security fix for GHSA-p77j-4mvh-x3m3 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0
Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OX52172 Security fix for GHSA-mh2q-q3fh-2475 applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0
Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-QL10579 Security fix for GHSA-hfvc-g4fc-pqhx applied in: gcp-compute-persistent-disk-csi-driver 1.25.0-r0
Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EY57242 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the gcp-compute-persistent-disk-csi-driver package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-MJ34936 Security fix for GHSA-8wmf-6v46-5gfg applied in: weaviate-fips 1.38.19-r3, weaviate-fips 1.39.10-r1
GHSA-8wmf-6v46-5gfg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-QF15454 Security fix for GHSA-mpwr-8vm7-h73f applied in: external-secrets-operator-fips 2.7.0-r1
Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RV05686 Security fix for GHSA-cp6g-7hqx-qxhp applied in: external-secrets-operator-fips 2.7.0-r1
Security vulnerability affects the external-secrets-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EU28747 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS
Security vulnerability affects the external-secrets-operator-fips package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...
CLEANSTART-2026-GF02196 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-AO34403 temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com
Security vulnerability affects the apache-hive package. A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com...
CLEANSTART-2026-JS33298 flaw was discovered in FasterXML jackson-databind in all versions before 2
Security vulnerability affects the apache-hive package. A flaw was discovered in FasterXML jackson-databind in all versions before 2...
CLEANSTART-2026-QI59332 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-EQ87084 Connect2id Nimbus JOSE+JWT before v7
Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE+JWT before v7...
CLEANSTART-2026-CO70761 In Connect2id Nimbus JOSE+JWT before 9
Security vulnerability affects the apache-hive package. In Connect2id Nimbus JOSE+JWT before 9...
CLEANSTART-2026-YW54942 Fasterxml Jackson version Before 2
Security vulnerability affects the apache-hive package. Fasterxml Jackson version Before 2...
CLEANSTART-2026-NL20798 Use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava versions 1
Security vulnerability affects the apache-hive package. Use of Java's default temporary directory for file creation in FileBackedOutputStream in Google Guava versions 1...
CLEANSTART-2026-FI29300 Connect2id Nimbus JOSE + JWT 10
Security vulnerability affects the apache-hive package. Connect2id Nimbus JOSE + JWT 10...
CLEANSTART-2026-NG64377 Unbounded memory allocation in Google Guava 11
Security vulnerability affects the apache-hive package. Unbounded memory allocation in Google Guava 11...
CLEANSTART-2026-CP80171 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-AS89011 In FasterXML jackson-databind before versions 2
Security vulnerability affects the apache-hive package. In FasterXML jackson-databind before versions 2...
CLEANSTART-2026-EV27822 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-GD39113 flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly
Security vulnerability affects the apache-hive package. A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly...
CLEANSTART-2026-GG82498 In FasterXML jackson-databind before 2
Security vulnerability affects the apache-hive package. In FasterXML jackson-databind before 2...
CLEANSTART-2026-NC21298 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-NN88858 Polymorphic Typing issue was discovered in FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2...
CLEANSTART-2026-TR29760 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-RI88730 flaw was found in jackson-databind before 2
Security vulnerability affects the apache-hive package. A flaw was found in jackson-databind before 2...
CLEANSTART-2026-WO32064 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...