CLEANSTART-2026-HH95708 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Security vulnerability affects the apache-hive package. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender...

CLEANSTART-2026-PY40890 In verifyHostName of OkHostnameVerifier

Security vulnerability affects the apache-hive package. In verifyHostName of OkHostnameVerifier...

CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container

Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...

CLEANSTART-2026-NO09997 Use of Arrays

Security vulnerability affects the apache-hive package. Use of Arrays...

CLEANSTART-2026-MW74031 Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network

Security vulnerability affects the apache-hive package. Improper input validation in JDBC Driver for SQL Server allows an unauthorized attacker to perform spoofing over a network...

CLEANSTART-2026-VM57227 Those using java

Security vulnerability affects the apache-hive package. Those using java...

CLEANSTART-2026-WN90580 flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature

Security vulnerability affects the apache-hive package. A flaw was found in Wildfly's implementation of Xerces, specifically in the way the XMLSchemaValidator class in the JAXP component of Wildfly enforced the "use-grammar-pool-only" feature...

CLEANSTART-2026-QA75834 Out-of-bounds memory operations in org

Security vulnerability affects the apache-hive package. Out-of-bounds memory operations in org...

CLEANSTART-2026-UB44506 yawkat LZ4 Java provides LZ4 compression for Java

Security vulnerability affects the apache-hive package. yawkat LZ4 Java provides LZ4 compression for Java...

CLEANSTART-2026-HR57844 There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads

Security vulnerability affects the apache-hive package. There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads...

CLEANSTART-2026-UI56103 XMLscanner

Security vulnerability affects the apache-hive package. XMLscanner...

CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...

CLEANSTART-2026-AT67837 Socket Appender in Apache Log4j Core versions 2

Security vulnerability affects the apache-hive package. The Socket Appender in Apache Log4j Core versions 2...

CLEANSTART-2026-VD23579 fix for CVE-2025-68161 https://logging

CVE-2026-34477 affects multiple packages. The fix for CVE-2025-68161 https://logging. See references for individual vulnerability details...

CLEANSTART-2026-XS63603 In Eclipse Jetty versions 9

Security vulnerability affects the apache-hive package. In Eclipse Jetty versions 9...

CLEANSTART-2026-OW18988 XMLScanner

Security vulnerability affects the apache-hive package. XMLScanner...

CLEANSTART-2026-WR59127 Apache Xerces2 Java Parser before 2

Security vulnerability affects the apache-hive package. Apache Xerces2 Java Parser before 2...

CLEANSTART-2026-ZU77357 Netty is an open-source, asynchronous event-driven network application framework

Security vulnerability affects the apache-hive package. Netty is an open-source, asynchronous event-driven network application framework...

CLEANSTART-2026-IX04206 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-JA22493 Apache Log4j Core's XmlLayout https://logging

Security vulnerability affects the apache-hive package. Apache Log4j Core's XmlLayout https://logging...

CLEANSTART-2026-IJ97561 stack overflow in Jettison before v1

Security vulnerability affects the apache-hive package. A stack overflow in Jettison before v1...

CLEANSTART-2026-IL67419 Netty is an asynchronous, event-driven network application framework

CVE-2026-42580 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-BY06273 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-FW96675 infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements

Security vulnerability affects the apache-hive package. An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements...

CLEANSTART-2026-IQ25144 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-HP63301 Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4

Security vulnerability affects the apache-hive package. Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4...

CLEANSTART-2026-RP42469 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1

CVE-2026-34479 affects multiple packages. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1. See references for individual vulnerability details...

CLEANSTART-2026-VO44592 Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)

Security vulnerability affects the apache-hive package. Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks DOS...

CLEANSTART-2026-NZ47106 Jettison before v1

Security vulnerability affects the apache-hive package. Jettison before v1...

CLEANSTART-2026-YA06862 Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service (DoS) attack

CVE-2026-59282 affects multiple packages. Spring Framework applications that use Spring's data binding infrastructure to apply user-supplied property paths onto a target object may be vulnerable to a Denial of Service DoS attack. See references for individual vulnerability details...

CLEANSTART-2026-QB68798 Netty is a network application framework for development of protocol servers and clients

CVE-2026-50020 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-DA58471 Netty is a network application framework for development of protocol servers and clients

CVE-2026-56746 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-DD24973 Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`

CVE-2026-41417 affects multiple packages. Netty allows request-line validation to be bypassed when a DefaultHttpRequest or DefaultFullHttpRequest is created first and its URI is later changed via setUri. See references for individual vulnerability details...

CLEANSTART-2026-AS77854 Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression)

Security vulnerability affects the apache-hive package. The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data which affects the allocation size used during decompression...

CLEANSTART-2026-BL92558 Netty is an asynchronous, event-driven network application framework

CVE-2026-59921 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-FK73993 Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage

Security vulnerability affects the apache-hive package. The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage...

CLEANSTART-2026-LZ91805 Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-OX13764 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-PK10148 Netty is an asynchronous, event-driven network application framework

CVE-2026-59903 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-QD78473 Netty is an asynchronous, event-driven network application framework

Security vulnerability affects the apache-hive package. Netty is an asynchronous, event-driven network application framework...

CLEANSTART-2026-UI06484 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-WI10177 Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-TF61372 ZlibDecoders in Netty 4

Security vulnerability affects the apache-hive package. The ZlibDecoders in Netty 4...

CLEANSTART-2026-VN95334 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients

Security vulnerability affects the apache-hive package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CLEANSTART-2026-BC52687 Netty before 4

Security vulnerability affects the apache-hive package. Netty before 4...

CLEANSTART-2026-ET03364 Netty is a network application framework for development of protocol servers and clients

CVE-2026-55831 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-EG79698 Netty is a network application framework for development of protocol servers and clients

CVE-2026-56745 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...

CLEANSTART-2026-FG43911 Netty is an asynchronous, event-driven network application framework

CVE-2026-59901 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-LU91275 Netty is an asynchronous, event-driven network application framework

CVE-2026-42583 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...

CLEANSTART-2026-AN70702 Netty is an asynchronous, event-driven network application framework

CVE-2026-42587 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...