CLEANSTART-2026-KA25006 Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method

Security vulnerability affects the nfs-subdir-external-provisioner package. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method...

CLEANSTART-2026-TT67272 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Security vulnerability affects the nfs-subdir-external-provisioner package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...

CLEANSTART-2026-EM69847 html

CVE-2025-47911 affects multiple packages. The html. See references for individual vulnerability details...

CLEANSTART-2026-UU01575 SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption

CVE-2025-58181 affects multiple packages. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption. See references for individual vulnerability details...

CLEANSTART-2026-FL89877 html

CVE-2025-58190 affects multiple packages. The html. See references for individual vulnerability details...

CLEANSTART-2026-RT11229 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...

CLEANSTART-2026-JU24035 etcd is a distributed key-value store for the data of a distributed system

CVE-2026-73500 affects multiple packages. etcd is a distributed key-value store for the data of a distributed system. See references for individual vulnerability details...

CLEANSTART-2026-KZ19518 SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read

CVE-2025-47914 affects multiple packages. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read. See references for individual vulnerability details...

CLEANSTART-2026-CF12718 Contour is a Kubernetes ingress controller using Envoy proxy

CVE-2026-41246 affects multiple packages. Contour is a Kubernetes ingress controller using Envoy proxy. See references for individual vulnerability details...

CLEANSTART-2026-OF39616 Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer

CVE-2026-46600 affects multiple packages. Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer. See references for individual vulnerability details...

CLEANSTART-2026-RQ61513 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Security vulnerability affects the nfs-subdir-external-provisioner package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have...

CLEANSTART-2026-TK74807 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the nfs-subdir-external-provisioner package. The net/url package does not set a limit on the number of query parameters in a query...

CLEANSTART-2026-GU21743 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process

CVE-2025-47913 affects multiple packages. SSH clients receiving SSHAGENTSUCCESS when expecting a typed response will panic and cause early termination of the client process. See references for individual vulnerability details...

CLEANSTART-2026-VZ78650 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0

CVE-2026-33814 affects multiple packages. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0. See references for individual vulnerability details...

CLEANSTART-2026-QN19137 httpTokenCacheKey uses path

Security vulnerability affects the nfs-subdir-external-provisioner package. httpTokenCacheKey uses path...

CLEANSTART-2026-EM66119 SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be re...

CVE-2025-22869 affects multiple packages. SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted. See references for...

CLEANSTART-2026-PY90502 Applications and libraries which misuse connection

Security vulnerability affects the nfs-subdir-external-provisioner package. Applications and libraries which misuse connection...

CLEANSTART-2026-LB27311 On Unix platforms, when listing the contents of a directory using File

Security vulnerability affects the external-dns package. On Unix platforms, when listing the contents of a directory using File...

CLEANSTART-2026-LL10619 On Linux, if the target of Root

Security vulnerability affects the external-dns package. On Linux, if the target of Root...

CLEANSTART-2026-HI24388 When logs are written to a widely-writable directory (the default), an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in i...

Security vulnerability affects the nfs-subdir-external-provisioner package. When logs are written to a widely-writable directory the default, an unprivileged attacker may predict a privileged process's log file path and pre-create a symbolic link to a sensitive file in its place...

CLEANSTART-2026-ZN15240 If a trusted template author were to write a <script> tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape...

CVE-2026-39826 affects multiple packages. If a trusted template author were to write a tag containing an empty 'type' attribute or a 'type' attribute with an ASCII whitespace, the execution of the template would incorrectly escape any data passed into the block. See references for individual...

CLEANSTART-2026-TC68391 CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a <meta> tag's <content> attribute

Security vulnerability affects the external-dns package. CVE-2026-27142 fixed a vulnerability in which URLs were not correctly escaped inside of a tag's attribute...

CLEANSTART-2026-TZ31810 Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used

Security vulnerability affects the external-dns package. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used...

CLEANSTART-2026-UK17793 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

CVE-2026-42504 affects multiple packages. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details...

CLEANSTART-2026-NH00645 amqp091-go is a Go AMQP 0

CVE-2026-79921 affects multiple packages. amqp091-go is a Go AMQP 0. See references for individual vulnerability details...

CLEANSTART-2026-PK85962 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-IT27758 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-VO07042 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-OK83858 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-OF14206 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-ZB44736 amqp091-go is a Go AMQP 0

CVE-2026-107386 affects multiple packages. amqp091-go is a Go AMQP 0. See references for individual vulnerability details...

CLEANSTART-2026-CK95490 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-YB17201 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-VZ69242 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-TI12520 RabbitMQ amqp091-go is a Go AMQP 0

Security vulnerability affects the opentelemetry-collector-contrib package. RabbitMQ amqp091-go is a Go AMQP 0...

CLEANSTART-2026-YH75013 Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node

CVE-2026-85525 affects multiple packages. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node. See references for individual vulnerability details...

CLEANSTART-2026-HL90010 Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node

Security vulnerability affects the opentelemetry-collector-contrib package. Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node...

CLEANSTART-2026-VD32941 url

CVE-2026-25679 affects multiple packages. url. See references for individual vulnerability details...

CLEANSTART-2026-AN49609 Within HostnameError

Security vulnerability affects the nfs-subdir-external-provisioner package. Within HostnameError...

CLEANSTART-2026-HS88612 (*x509

CVE-2026-27145 affects multiple packages. x509. See references for individual vulnerability details...

CLEANSTART-2026-OV41869 Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS

CVE-2026-56858 affects multiple packages. Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS. See references for individual vulnerability details...

CLEANSTART-2026-YF83540 Previously, resolving relative paths containing parent directory ('

CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

CLEANSTART-2026-XJ89225 hono before 4

Security vulnerability affects the langfuse package. hono before 4...

CLEANSTART-2026-JE80726 Security fix for GHSA-wq5f-xc86-pv6w applied in: langfuse 4.35.0-r1

Security vulnerability affects the langfuse package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-OL77428 flaw was found in librsvg

Security vulnerability affects the langfuse package. A flaw was found in librsvg...

CLEANSTART-2026-YH79720 fast-uri is a dependency-free RFC 3986 URI parser for Node

Security vulnerability affects the langfuse package. fast-uri is a dependency-free RFC 3986 URI parser for Node...

CLEANSTART-2026-XI51543 Axios is a promise-based HTTP client for the browser and Node

Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...

CLEANSTART-2026-ZN41930 Axios is a promise-based HTTP client for the browser and Node

Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...

CLEANSTART-2026-LO03281 MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients

Security vulnerability affects the langfuse package. MCP TypeScript SDK is the official TypeScript SDK for Model Context Protocol servers and clients...

CLEANSTART-2026-RK00164 Axios is a promise-based HTTP client for the browser and Node

Security vulnerability affects the langfuse package. Axios is a promise-based HTTP client for the browser and Node...