12192 matches found
CLEANSTART-2026-JS49765 mongo-go-driver repository contains CGo bindings for GSSAPI (Kerberos) authentication on Linux and macOS
Security vulnerability affects the opentelemetry-collector-contrib package. The mongo-go-driver repository contains CGo bindings for GSSAPI Kerberos authentication on Linux and macOS...
CLEANSTART-2026-LX44302 OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages
Security vulnerability affects the opentelemetry-collector-contrib package. OpenTelemetry eBPF Profiler is a production-scale agent for profiling applications across multiple programming languages...
CLEANSTART-2026-WX29225 Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello
CVE-2026-42505 affects multiple packages. Handshakes which used Encrypted Client Hello could be de-anonymized by a passive network observer due to a disclosure of pre-shared key identities in the unencrypted client hello. See references for individual vulnerability details...
CLEANSTART-2026-VJ12728 On Unix systems, opening a file in an os
CVE-2026-39822 affects multiple packages. On Unix systems, opening a file in an os. See references for individual vulnerability details...
CLEANSTART-2026-RD27421 Security fix for GHSA-hrxh-6v49-42gf applied in: tigera-operator 1.42.4-r0, grafana 13.1.0-r3, vault 2.0.2-r0, opentelemetry-collector-contrib 0.152.0-r1
GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-LK11440 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the opentelemetry-collector-contrib package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-IQ41446 Security fix for GHSA-259r-337f-4rfw applied in: tigera-operator 1.42.4-r1, opentelemetry-collector-contrib 0.152.0-r2
GHSA-259r-337f-4rfw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-PU63408 containerd is an open-source container runtime
Security vulnerability affects the helm-operator-fips package. containerd is an open-source container runtime...
CLEANSTART-2026-WZ49718 attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing
Security vulnerability affects the helm-operator-fips package. An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...
CLEANSTART-2026-ON36329 Security fix for GHSA-f9f8-9pmf-xv68 applied in: helm-operator-fips 1.38.0-r3
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NB05641 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate
CVE-2025-61727 affects multiple packages. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate. See references for individual vulnerability details...
CLEANSTART-2026-CD52607 Within HostnameError
CVE-2025-61729 affects multiple packages. Within HostnameError. See references for individual vulnerability details...
CLEANSTART-2026-SI21750 Security fix for GHSA-9h84-qmv7-982p applied in: helm-operator-fips 1.38.0-r3
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-PV63985 Security fix for GHSA-5xqw-8hwv-wg92 applied in: helm-operator-fips 1.38.0-r3
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-KY23240 Security fix for GHSA-557j-xg8c-q2mm applied in: helm-operator-fips 1.38.0-r3
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-WA53854 Security fix for GHSA-4hfp-h4cw-hj8p applied in: helm-operator-fips 1.38.0-r3
Security vulnerability affects the helm-operator-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AQ61858 c-ares function `ares_parse_naptr_reply()`, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was c...
Security vulnerability affects the nodejs-24 package. The c-ares function aresparsenaptrreply, which is used for parsing NAPTR responses, could be triggered to read memory outside of the given input buffer if the passed in DNS response packet was crafted in a particular way...
CLEANSTART-2026-LL47862 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-PL16008 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-ID13469 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-YQ27190 Node
Security vulnerability affects the nodejs-24 package. The Node...
CLEANSTART-2026-QX63869 HTTP parser in all current versions of Node
Security vulnerability affects the nodejs-24 package. The HTTP parser in all current versions of Node...
CLEANSTART-2026-DV63680 `'path'` module in the Node
Security vulnerability affects the nodejs-24 package. The 'path' module in the Node...
CLEANSTART-2026-PZ96090 nghttp2 version >= 1
Security vulnerability affects the nodejs-24 package. nghttp2 version = 1...
CLEANSTART-2026-RX03118 In all versions of Node
Security vulnerability affects the nodejs-24 package. In all versions of Node...
CLEANSTART-2026-JF88301 Calling Buffer
Security vulnerability affects the nodejs-24 package. Calling Buffer...
CLEANSTART-2026-IV73686 OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack
Security vulnerability affects the nodejs-24 package. The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack...
CLEANSTART-2026-NU24041 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-YZ01964 OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack
Security vulnerability affects the nodejs-24 package. The OpenSSL ECDSA signature algorithm has been shown to be vulnerable to a timing side channel attack...
CLEANSTART-2026-ZB96802 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-UB54209 In Node
Security vulnerability affects the nodejs-24 package. In Node...
CLEANSTART-2026-IA30911 Node
Security vulnerability affects the nodejs-24 package. Node...
CLEANSTART-2026-XC13093 Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service...
CLEANSTART-2026-WZ77365 Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service...
CLEANSTART-2026-UM64475 Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service...
CLEANSTART-2026-RJ56539 spdystream is a Go library for multiplexing streams over SPDY connections
Security vulnerability affects the cloudnative-pg-fips package. spdystream is a Go library for multiplexing streams over SPDY connections...
CLEANSTART-2026-ST98216 Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service...
CLEANSTART-2026-QQ59156 Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service...
CLEANSTART-2026-EG08504 attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames
CVE-2023-45288 affects multiple packages. An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. See references for individual vulnerability details...
CLEANSTART-2026-BX90561 Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service...
CLEANSTART-2026-BU08584 Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service
Security vulnerability affects the nodejs-24 package. Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service...
CLEANSTART-2026-OM41061 Improper Certificate Validation in Node
Security vulnerability affects the nodejs-24 package. Improper Certificate Validation in Node...
CLEANSTART-2026-XE23259 Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
Security vulnerability affects the nodejs-24 package. Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons...
CLEANSTART-2026-YO77738 HTTP request smuggling in Node
Security vulnerability affects the nodejs-24 package. HTTP request smuggling in Node...
CLEANSTART-2026-QZ70623 In nghttp2 before version 1
Security vulnerability affects the nodejs-24 package. In nghttp2 before version 1...
CLEANSTART-2026-DW84477 napi_get_value_string_*() allows various kinds of memory corruption in node < 10
Security vulnerability affects the nodejs-24 package. napigetvaluestring allows various kinds of memory corruption in node 10...
CLEANSTART-2026-VN81441 Security fix for GHSA-j88v-2chj-qfwx applied in: cloudnative-pg-fips 1.29.0-r0
Security vulnerability affects the cloudnative-pg-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OH78893 implementation of realpath in libuv < 10
Security vulnerability affects the nodejs-24 package. The implementation of realpath in libuv 10...