11796 matches found
CLEANSTART-2026-RE47294 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the sonarqube package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-JI47500 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the sonarqube package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-YI20813 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the sonarqube package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-MO89596 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the sonarqube package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-JP35751 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the sonarqube package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-VE23252 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the sonarqube package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-NX17544 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-SX30440 Apache Log4j's JsonTemplateLayout https://logging
Security vulnerability affects the sonarqube package. Apache Log4j's JsonTemplateLayout https://logging...
CLEANSTART-2026-DS38629 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...
CLEANSTART-2026-FP29744 Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`
Security vulnerability affects the sonarqube package. Netty allows request-line validation to be bypassed when a DefaultHttpRequest or DefaultFullHttpRequest is created first and its URI is later changed via setUri...
CLEANSTART-2026-FD40389 non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters)
Security vulnerability affects the sonarqube package. The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters...
CLEANSTART-2026-EJ43845 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-QJ40083 fix for CVE-2025-68161 https://logging
Security vulnerability affects the sonarqube package. The fix for CVE-2025-68161 https://logging...
CLEANSTART-2026-BH90179 Apache Log4j Core's XmlLayout https://logging
Security vulnerability affects the sonarqube package. Apache Log4j Core's XmlLayout https://logging...
CLEANSTART-2026-DZ37385 Apache Log4j Core's Rfc5424Layout https://logging
Security vulnerability affects the sonarqube package. Apache Log4j Core's Rfc5424Layout https://logging...
CLEANSTART-2026-LD36349 Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1
Security vulnerability affects the sonarqube package. The Log4j1XmlLayout from the Apache Log4j 1-to-Log4j 2 bridge fails to escape characters forbidden by the XML 1...
CLEANSTART-2026-WQ77811 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-RK76789 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-RY43720 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-JR63274 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-LA60535 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-PU24283 In Jakarta Mail versions prior to 2
Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2...
CLEANSTART-2026-NU36119 Deserialization of untrusted data vulnerability in QOS
Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...
CLEANSTART-2026-DU85767 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-GG17411 Deserialization of untrusted data vulnerability in QOS
Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...
CLEANSTART-2026-XU20448 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-NR86406 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-FS24569 Socket Appender in Apache Log4j Core versions 2
Security vulnerability affects the sonarqube package. The Socket Appender in Apache Log4j Core versions 2...
CLEANSTART-2026-KW24127 flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint https://www...
CLEANSTART-2026-OE13430 Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure
Security vulnerability affects the sonarqube package. Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure...
CLEANSTART-2026-RH85110 Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query
Security vulnerability affects the sonarqube package. Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query...
CLEANSTART-2026-IB65674 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads CAPEC-230...
CLEANSTART-2026-ZB19187 flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier...
CLEANSTART-2026-XT16211 Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') (CWE-444) in Elasticsearch can lead to information disclosure via HTTP Request Smuggling (CAPEC-33)
Security vulnerability affects the sonarqube package. Inconsistent Interpretation of HTTP Requests 'HTTP Request Smuggling' CWE-444 in Elasticsearch can lead to information disclosure via HTTP Request Smuggling CAPEC-33...
CLEANSTART-2026-VD99251 flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input...
CLEANSTART-2026-FS14470 flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input...
CLEANSTART-2026-CF09659 Deserialization of Untrusted Data (CWE-502) in the Elasticsearch machine learning component can lead to remote code execution via Object Injection (CAPEC-586)
Security vulnerability affects the sonarqube package. Deserialization of Untrusted Data CWE-502 in the Elasticsearch machine learning component can lead to remote code execution via Object Injection CAPEC-586...
CLEANSTART-2026-KP61093 flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input
Security vulnerability affects the sonarqube package. A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input...
CLEANSTART-2026-EF36950 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA
Security vulnerability affects the sonarqube package. Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA...
CLEANSTART-2026-HK92541 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...
CLEANSTART-2026-BL83922 Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker
Security vulnerability affects the sonarqube package. Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker...
CLEANSTART-2026-TB71295 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-AH85401 native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, with...
Security vulnerability affects the sonarqube package. The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays withi...
CLEANSTART-2026-YK51895 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-GG06012 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to denial of service via a specially crafted search request submitted by a low-privileged authenticated user...
CLEANSTART-2026-GV25885 Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Memory Allocation with Excessive Size Value CWE-789 in Elasticsearch can lead to denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-ZW02426 Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-WN55033 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-ZU18134 Reachable Assertion (CWE-617) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153)
Security vulnerability affects the sonarqube package. Reachable Assertion CWE-617 in Elasticsearch can lead to denial of service via Input Data Manipulation CAPEC-153...
CLEANSTART-2026-JM55948 Uncontrolled Resource Consumption (CWE-400) in Elasticsearch can lead to denial of service via Exponential Data Expansion (CAPEC-197)
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption CWE-400 in Elasticsearch can lead to denial of service via Exponential Data Expansion CAPEC-197...