11062 matches found
CLEANSTART-2026-TG02520 fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer
Security vulnerability affects the apache-nifi package. The fix for CVE-2024-52046 in Apache MINA AbstractIoBuffer...
CLEANSTART-2026-FS57151 In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) condition
Security vulnerability affects the apache-nifi package. In Micrometer, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service DoS condition...
CLEANSTART-2026-ZK87180 application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2
Security vulnerability affects the apache-nifi package. An application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2...
CLEANSTART-2026-OR53843 Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination aft...
Security vulnerability affects the apache-nifi package. Spring Security's CookieRequestCache and CookieServerRequestCache store the pre-authentication request URL in a browser cookie so that users can be redirected back to their intended destination after a successful login...
CLEANSTART-2026-XK50947 Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly
Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...
CLEANSTART-2026-VT93127 Vulnerability in Spring Spring Security
Security vulnerability affects the apache-nifi package. Vulnerability in Spring Spring Security...
CLEANSTART-2026-BT04597 Apache MINA's AbstractIoBuffer
Security vulnerability affects the apache-nifi package. Apache MINA's AbstractIoBuffer...
CLEANSTART-2026-VV78172 Apache NiFi 1
Security vulnerability affects the apache-nifi package. Apache NiFi 1...
CLEANSTART-2026-MN49716 In Eclipse Jetty, versions 12
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, versions 12...
CLEANSTART-2026-KF29618 Apache NiFi 1
Security vulnerability affects the apache-nifi package. Apache NiFi 1...
CLEANSTART-2026-TY92460 Critical XXE in Apache Tika tika-core (1
Security vulnerability affects the apache-nifi package. Critical XXE in Apache Tika tika-core 1...
CLEANSTART-2026-PV64921 In Eclipse Jetty, the HTTP/1
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the HTTP/1...
CLEANSTART-2026-SN03087 Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Security vulnerability affects the apache-nifi package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs...
CLEANSTART-2026-XW11767 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...
CLEANSTART-2026-BC80499 In Eclipse Jetty, an HTTP URI of this form: /public;/
Security vulnerability affects the apache-nifi package. In Eclipse Jetty, an HTTP URI of this form: /public;/...
CLEANSTART-2026-SV89118 Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics
Security vulnerability affects the apache-nifi package. The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics...
CLEANSTART-2026-EO53976 In Eclipse Jetty versions 12
Security vulnerability affects the apache-nifi package. In Eclipse Jetty versions 12...
CLEANSTART-2026-AU34344 In jose4j before 0
Security vulnerability affects the apache-nifi package. In jose4j before 0...
CLEANSTART-2026-KL35365 Prometheus is an open-source monitoring system and time series database
CVE-2026-42151 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...
CLEANSTART-2026-FB95411 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the cortex package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-XX38333 Prometheus is an open-source monitoring system and time series database
CVE-2026-42154 affects multiple packages. Prometheus is an open-source monitoring system and time series database. See references for individual vulnerability details...
CLEANSTART-2026-JT25252 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the loki package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-BD59133 Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's
Security vulnerability affects the apache2 package. Apache httpd allows remote attackers to read secret data from process memory if the Limit directive can be set in a user's...
CLEANSTART-2026-MY08631 By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service
Security vulnerability affects the apache2 package. By specially crafting HTTP/2 requests, workers would be allocated 60 seconds longer than necessary, leading to worker exhaustion and a denial of service...
CLEANSTART-2026-TY04609 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-XO55123 maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A maliciously constructed HTTP/2 request could cause modhttp2 in Apache HTTP Server 2...
CLEANSTART-2026-LA57520 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-IK18722 specially crafted request could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted request could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-QH33637 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-JY61388 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-GS47054 By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault
Security vulnerability affects the apache2 package. By specially crafting HTTP requests, the modmd challenge handler would dereference a NULL pointer and cause the child process to segfault...
CLEANSTART-2026-GY12147 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-YA72410 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-MQ00302 specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. A specially crafted HTTP request header could have crashed the Apache HTTP Server prior to version 2...
CLEANSTART-2026-PP80959 In Apache httpd 2
Security vulnerability affects the apache2 package. In Apache httpd 2...
CLEANSTART-2026-TI49446 HTTP strict parsing changes added in Apache httpd 2
Security vulnerability affects the apache2 package. The HTTP strict parsing changes added in Apache httpd 2...
CLEANSTART-2026-RR06957 When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2
Security vulnerability affects the apache2 package. When an HTTP/2 stream was destroyed after being handled, the Apache HTTP Server prior to version 2...
CLEANSTART-2026-MZ37947 bug exists in the way mod_ssl handled client renegotiations
Security vulnerability affects the apache2 package. A bug exists in the way modssl handled client renegotiations...
CLEANSTART-2026-DX30733 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-ZN37386 vulnerability was found in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A vulnerability was found in Apache HTTP Server 2...
CLEANSTART-2026-QW58574 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-ZG05293 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-WK36713 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-HI95009 vulnerability was found in Apache HTTP Server 2
Security vulnerability affects the apache2 package. A vulnerability was found in Apache HTTP Server 2...
CLEANSTART-2026-ZG87448 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-ZI95703 In Apache HTTP server 2
Security vulnerability affects the apache2 package. In Apache HTTP server 2...
CLEANSTART-2026-KO94299 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...
CLEANSTART-2026-XV82454 In Apache HTTP Server 2
Security vulnerability affects the apache2 package. In Apache HTTP Server 2...