19476 matches found
CLEANSTART-2026-EP68860 jq is a command-line JSON processor
Security vulnerability affects the jq package. jq is a command-line JSON processor...
CLEANSTART-2026-EA27044 jq is a command-line JSON processor
Security vulnerability affects the jq package. jq is a command-line JSON processor...
CLEANSTART-2026-IK37838 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the npm package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-HY40414 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the npm package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-KJ72597 jq is a command-line JSON processor
Security vulnerability affects the jq package. jq is a command-line JSON processor...
CLEANSTART-2026-TN95778 In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
Security vulnerability affects the kedacore-http-add-on package. In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found...
CLEANSTART-2026-IT40205 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the npm package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-VN05773 jq is a command-line JSON processor
Security vulnerability affects the jq package. jq is a command-line JSON processor...
CLEANSTART-2026-DU50276 jq is a command-line JSON processor
Security vulnerability affects the jq package. jq is a command-line JSON processor...
CLEANSTART-2026-UC41347 vulnerability was determined in jqlang jq up to 1
Security vulnerability affects the jq package. A vulnerability was determined in jqlang jq up to 1...
CLEANSTART-2026-UF96900 jq is a command-line JSON processor
Security vulnerability affects the jq package. jq is a command-line JSON processor...
CLEANSTART-2026-WT34368 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
Security vulnerability affects the kedacore-http-add-on package. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n...
CLEANSTART-2026-BL66064 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
Security vulnerability affects the keycloak package. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API...
CLEANSTART-2026-KO45167 pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the keycloak package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
CLEANSTART-2026-FG02815 pgjdbc, the PostgreSQL JDBC Driver, versions 42
Security vulnerability affects the keycloak package. pgjdbc, the PostgreSQL JDBC Driver, versions 42...
CLEANSTART-2026-LY99659 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...
CLEANSTART-2026-HD20347 Security fix for CVE-2026-93879 applied in: keycloak 26.8.1-r1
Security vulnerability affects the keycloak package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-ZY71436 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...
CLEANSTART-2026-NB17779 jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be ...
Security vulnerability affects the keycloak package. jackson-databind validates the outer class of a class-name type ID but accepts attacker-selected classes inside its generic arguments, even when those classes violate the declared type or would be rejected as direct type IDs...
CLEANSTART-2026-JY69391 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...
CLEANSTART-2026-FW97958 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-GQ03184 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-GB60336 In Eclipse Vert
Security vulnerability affects the keycloak package. In Eclipse Vert...
CLEANSTART-2026-QU88485 In Eclipse Vert
Security vulnerability affects the keycloak package. In Eclipse Vert...
CLEANSTART-2026-XZ60233 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-OE38729 MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases
Security vulnerability affects the keycloak package. MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases...
CLEANSTART-2026-SL64169 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
Security vulnerability affects the keycloak package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...
CLEANSTART-2026-MG82971 In Eclipse Vert
Security vulnerability affects the keycloak package. In Eclipse Vert...
CLEANSTART-2026-HH70235 buffer overflow vulnerability in the Brotli decoder (c/dec/decode
Security vulnerability affects the keycloak package. A buffer overflow vulnerability in the Brotli decoder c/dec/decode...
CLEANSTART-2026-HA43817 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-WN68326 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-FC65003 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-WO34439 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-UJ19608 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-XC37199 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-ID29535 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-AN74687 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-SR00790 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-SG59143 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-AF67537 In Bouncy Castle for Java before 1
Security vulnerability affects the keycloak package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-ZY17213 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-116585 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...
CLEANSTART-2026-XM90645 In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
CVE-2026-97045 affects multiple packages. In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. See references for individual vulnerability details...
CLEANSTART-2026-YN60892 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n. See references for individual vulnerability details...
CLEANSTART-2026-EQ07538 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-116586 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...
CLEANSTART-2026-HB11422 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-116587 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...
CLEANSTART-2026-MG71549 Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D lan...
Security vulnerability affects the tempo package. Memory allocation with excessive size value, Allocation of resources without limits or throttling vulnerability in Apache Thrift Go, netstd, OCaml, Erlang, JavaME, Rust, C++, Java, Kotlin and D language bindings...
CLEANSTART-2026-PR85829 Security fix for GHSA-gj4f-r7mf-jjxh applied in: apache-superset 6.1.0-r8
Security vulnerability affects the apache-superset package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-WW74510 decode-uri-component through 0
Security vulnerability affects the apache-superset package. decode-uri-component through 0...
CLEANSTART-2026-WA93302 decode-uri-component provides a more robust alternative to decodeURIComponent
Security vulnerability affects the apache-superset package. decode-uri-component provides a more robust alternative to decodeURIComponent...
CLEANSTART-2026-OK30557 fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks
Security vulnerability affects the apache-superset package. fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks...