CLEANSTART-2026-IX43847 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-MH48139 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-RK72601 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-ZP83138 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-OD40775 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-KH25643 kin-openapi is a Go project for handling OpenAPI files

Security vulnerability affects the grafana package. kin-openapi is a Go project for handling OpenAPI files...

CLEANSTART-2026-FR22195 PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it

Security vulnerability affects the npm package. PostCSS Selector Parser is a CSS selector parser that integrates with PostCSS but does not require it...

CLEANSTART-2026-IP24198 Security fix for GHSA-259r-337f-4rfw applied in: rundeck 6.0.1-r2

Security vulnerability affects the rundeck package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-TH92184 Security fix for GHSA-r7wm-3cxj-wff9 applied in: sonarqube 26.8.0.126808-r3, rundeck 6.0.1-r2

GHSA-r7wm-3cxj-wff9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PU19584 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-LQ15111 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-XD91859 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-WB16925 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript

Security vulnerability affects the npm package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...

CLEANSTART-2026-UO59910 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-YY56325 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-ZD57253 brace-expansion library generates arbitrary strings containing a common prefix and suffix

Security vulnerability affects the npm package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...

CLEANSTART-2026-YI46712 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-LA57544 brace-expansion library generates arbitrary strings containing a common prefix and suffix

Security vulnerability affects the npm package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...

CLEANSTART-2026-FI53699 In Bouncy Castle for Java before 1

CVE-2026-12185 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-DU29459 brace-expansion library generates arbitrary strings containing a common prefix and suffix

Security vulnerability affects the npm package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...

CLEANSTART-2026-YQ53384 http-cache-semantics through 4

CVE-2026-93748 affects multiple packages. http-cache-semantics through 4. See references for individual vulnerability details...

CLEANSTART-2026-AI03846 In Bouncy Castle for Java before 1

CVE-2026-59650 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-DP79525 In Bouncy Castle for Java before 1

CVE-2026-8763 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-CS69387 In Bouncy Castle for Java before 1

Security vulnerability affects the rundeck package. In Bouncy Castle for Java before 1...

CLEANSTART-2026-SB14639 file_copy_fallback in gio/gfile

Security vulnerability affects the glib package. filecopyfallback in gio/gfile...

CLEANSTART-2026-IZ67766 In Bouncy Castle for Java before 1

CVE-2026-59647 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-GB21316 In Bouncy Castle for Java before 1

CVE-2026-59642 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-CP09253 In Bouncy Castle for Java before 1

CVE-2026-59639 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...

CLEANSTART-2026-UL93208 GSocketClient in GNOME GLib through 2

Security vulnerability affects the glib package. GSocketClient in GNOME GLib through 2...

CLEANSTART-2026-VJ71474 issue was discovered in GNOME GLib before 2

Security vulnerability affects the glib package. An issue was discovered in GNOME GLib before 2...

CLEANSTART-2026-JW54454 c3p0 is a JDBC Connection pooling library

Security vulnerability affects the rundeck package. c3p0 is a JDBC Connection pooling library...

CLEANSTART-2026-FO24538 etcd is a distributed key-value store for the data of a distributed system

Security vulnerability affects the rundeck package. etcd is a distributed key-value store for the data of a distributed system...

CLEANSTART-2026-QY77517 gRPC-Go is the Go language implementation of gRPC

CVE-2026-84304 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...

CLEANSTART-2026-IT80791 Security fix for GHSA-hrxh-6v49-42gf applied in: etcd 3.5.29-r1, grafana-rollout-operator 0.36.1-r0, rundeck 6.0.1-r2

GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YJ93143 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the rundeck package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-VV64101 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the rundeck package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-DR90917 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases

Security vulnerability affects the rundeck package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...

CLEANSTART-2026-YJ32154 security flaw has been discovered in mwiede jsch up to 2

Security vulnerability affects the rundeck package. A security flaw has been discovered in mwiede jsch up to 2...

CLEANSTART-2026-OZ28638 Using untrusted, non-normalized input as-is for metrics data (such as metric names, tag keys, or tag values) is a dangerous antipattern that general-purpose instrumentation should never perform

Security vulnerability affects the rundeck package. Using untrusted, non-normalized input as-is for metrics data such as metric names, tag keys, or tag values is a dangerous antipattern that general-purpose instrumentation should never perform...

CLEANSTART-2026-JM36564 TypeDeserializerBase

CVE-2026-91776 affects multiple packages. TypeDeserializerBase. See references for individual vulnerability details...

CLEANSTART-2026-YE95301 UTF8DataInputJsonParser

CVE-2026-89425 affects multiple packages. UTF8DataInputJsonParser. See references for individual vulnerability details...

CLEANSTART-2026-EA40241 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID

CVE-2026-91777 affects multiple packages. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID. See references for individual vulnerability details...

CLEANSTART-2026-UU37609 On most platforms, Go uses the given system root certificates

CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details...

CLEANSTART-2026-RD18751 client may issue specially crafted HTTP/1

Security vulnerability affects the rundeck package. A client may issue specially crafted HTTP/1...

CLEANSTART-2026-IG79892 Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by loadi...

Security vulnerability affects the graphviz package. Buffer Overflow in Graphviz Graph Visualization Tools from commit ID f8b9e035 and earlier allows remote attackers to execute arbitrary code or cause a denial of service application crash by loading a crafted file into the "lib/common/shapes...

CLEANSTART-2026-DD03194 ftp and scp tasks of Apache Ant can download files from a remote server

Security vulnerability affects the rundeck package. The ftp and scp tasks of Apache Ant can download files from a remote server...

CLEANSTART-2026-VO81158 client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap

Security vulnerability affects the rundeck package. A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap...

CLEANSTART-2026-YJ99832 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not

CVE-2026-56862 affects multiple packages. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. See references for individual vulnerability details...

CLEANSTART-2026-VP58336 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS

CVE-2026-56858 affects multiple packages. Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. See references for individual vulnerability details...

CLEANSTART-2026-VC29876 Previously, resolving relative paths containing parent directory ('

CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...