12639 matches found
CLEANSTART-2026-MU11707 zstd-jni before 1
Security vulnerability affects the wildfly package. zstd-jni before 1...
CLEANSTART-2026-JM40588 Netty versions 4
Security vulnerability affects the wildfly package. Netty versions 4...
CLEANSTART-2026-WJ34335 zstd-jni versions 1
Security vulnerability affects the wildfly package. zstd-jni versions 1...
CLEANSTART-2026-XI97037 flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count
Security vulnerability affects the wildfly package. A flaw was found in RESTEasy's IIOImageProvider, which decodes attacker-supplied image request bodies without enforcing any limit on the declared image dimensions or pixel count...
CLEANSTART-2026-OP88753 zstd-jni versions 1
Security vulnerability affects the wildfly package. zstd-jni versions 1...
CLEANSTART-2026-ZN77220 flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Acces...
Security vulnerability affects the wildfly package. A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins "", reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true...
CLEANSTART-2026-TJ31948 zstd-jni versions 1
Security vulnerability affects the wildfly package. zstd-jni versions 1...
CLEANSTART-2026-YB51786 flaw was found in Netty's HttpServerCodec
Security vulnerability affects the wildfly package. A flaw was found in Netty's HttpServerCodec...
CLEANSTART-2026-ZG30727 flaw was found in Netty
Security vulnerability affects the wildfly package. A flaw was found in Netty...
CLEANSTART-2026-ZG93473 zstd-jni before 1
Security vulnerability affects the wildfly package. zstd-jni before 1...
CLEANSTART-2026-OP95878 TypeDeserializerBase
Security vulnerability affects the wildfly package. TypeDeserializerBase...
CLEANSTART-2026-YK30931 Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID
Security vulnerability affects the wildfly package. Forward-reference completion for @JsonIdentityInfo object IDs in FasterXML jackson-databind performs a linear scan of the pending-reference accumulator for every resolved ID...
CLEANSTART-2026-ZY12468 zstd-jni versions before 1
Security vulnerability affects the wildfly package. zstd-jni versions before 1...
CLEANSTART-2026-CC37311 zstd-jni before 1
Security vulnerability affects the wildfly package. zstd-jni before 1...
CLEANSTART-2026-YZ58880 NumberInput
Security vulnerability affects the wildfly package. NumberInput...
CLEANSTART-2026-IN74238 UTF8DataInputJsonParser
Security vulnerability affects the wildfly package. UTF8DataInputJsonParser...
CLEANSTART-2026-GW69718 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the wildfly package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-FH00186 vulnerability has been found in luben zstd-jni up to 1
Security vulnerability affects the wildfly package. A vulnerability has been found in luben zstd-jni up to 1...
CLEANSTART-2026-KX25709 zstd-jni versions before 1
Security vulnerability affects the wildfly package. zstd-jni versions before 1...
CLEANSTART-2026-GP35995 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the wildfly package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-XP90287 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the wildfly package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-YH07141 trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped
CVE-2026-97030 affects multiple packages. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped. See references for individual vulnerability details...
CLEANSTART-2026-TG86788 yawkat LZ4 Java provides LZ4 compression for Java
Security vulnerability affects the kafka package. yawkat LZ4 Java provides LZ4 compression for Java...
CLEANSTART-2026-TE05326 Security fix for GHSA-fv92-fjc5-jj9h applied in: bank-vaults 1.31.4-r0
Security vulnerability affects the bank-vaults package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-FV74075 On Windows, when the target of Root
CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details...
CLEANSTART-2026-XC23927 When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...
CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details...
CLEANSTART-2026-XM80593 Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes
CVE-2026-94440 affects multiple packages. Parsing a multipart form can bypass memory limits and read an arbitrarily long line into memory when the remaining limit at the start of a part is less than 400 bytes. See references for individual vulnerability details...
CLEANSTART-2026-LB99880 undici is an HTTP client library for Node
Security vulnerability affects the npm package. undici is an HTTP client library for Node...
CLEANSTART-2026-GC90815 Security fix for GHSA-2464-8j7c-4cjm applied in: bank-vaults 1.31.4-r0
Security vulnerability affects the bank-vaults package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-WT48121 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-TS24569 ip-address before 10
Security vulnerability affects the npm package. ip-address before 10...
CLEANSTART-2026-OM39297 undici is an HTTP client library for Node
Security vulnerability affects the npm package. undici is an HTTP client library for Node...
CLEANSTART-2026-ZH14658 Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specify...
CVE-2026-97031 affects multiple packages. Multiple ECH outer extension references are not permitted under RFC 9849; previously, a client could send a well-crafted packet that could trigger memory exhaustion in the server process by specifying multiple references. See references for individual...
CLEANSTART-2026-VI52259 When http
CVE-2026-56866 affects multiple packages. When http. See references for individual vulnerability details...
CLEANSTART-2026-XE59858 undici is an HTTP client library for Node
Security vulnerability affects the npm package. undici is an HTTP client library for Node...
CLEANSTART-2026-GX04519 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: bank-vaults 1.31.4-r0
Security vulnerability affects the bank-vaults package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CU14361 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-MO09843 flaw was found in github
Security vulnerability affects the bank-vaults package. A flaw was found in github...
CLEANSTART-2026-LA92040 undici is an HTTP client library for Node
Security vulnerability affects the npm package. undici is an HTTP client library for Node...
CLEANSTART-2026-DF38360 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-KD10786 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the loki package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-ME95342 undici is an HTTP client library for Node
Security vulnerability affects the npm package. undici is an HTTP client library for Node...
CLEANSTART-2026-KU29312 When parsing a Range header containing a large number of small ranges, FileServer(FS), ServeContent, and ServeFile(FS) can consume an excessive amount of CPU
CVE-2026-78667 affects multiple packages. When parsing a Range header containing a large number of small ranges, FileServerFS, ServeContent, and ServeFileFS can consume an excessive amount of CPU. See references for individual vulnerability details...
CLEANSTART-2026-RT08772 unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process...
Security vulnerability affects the bank-vaults package. An unrecovered panic in the event stream header decoder in Amazon AWS SDK for Go v2 before release-2026-03-23 might allow an unauthenticated remote actor to terminate the consuming application process via a crafted event stream response fram...
CLEANSTART-2026-YN76474 On most platforms, Go uses the given system root certificates
CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details...
CLEANSTART-2026-DY42651 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
CVE-2026-78659 affects multiple packages. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request. See references for individual vulnerability details...
CLEANSTART-2026-IO40218 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
CVE-2026-78669 affects multiple packages. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values. See references for individual vulnerability...
CLEANSTART-2026-IW19449 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
CVE-2026-78663 affects multiple packages. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the buffered data. See references f...
CLEANSTART-2026-IU54775 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing
CVE-2026-78660 affects multiple packages. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing. See references for individual vulnerability details...
CLEANSTART-2026-VU96918 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
CVE-2026-97032 affects multiple packages. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently. See references for individual vulnerability details...