11062 matches found
CLEANSTART-2026-RW47407 Substitution encoding issue in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Substitution encoding issue in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-WF86343 Potential SSRF in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Potential SSRF in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-JH66547 Improper escaping of output in mod_rewrite in Apache HTTP Server 2
Security vulnerability affects the apache2 package. Improper escaping of output in modrewrite in Apache HTTP Server 2...
CLEANSTART-2026-DF56906 HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response
Security vulnerability affects the apache2 package. HTTP/2 incoming headers exceeding the limit are temporarily buffered in nghttp2 in order to generate an informative HTTP 413 response...
CLEANSTART-2026-IB07435 Vulnerability in core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. Vulnerability in core of Apache HTTP Server 2...
CLEANSTART-2026-PP94302 HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack
Security vulnerability affects the apache2 package. HTTP Response splitting in multiple modules in Apache HTTP Server allows an attacker that can inject malicious response headers into backend applications to cause an HTTP desynchronization attack...
CLEANSTART-2026-XP17348 null pointer dereference in mod_proxy in Apache HTTP Server 2
Security vulnerability affects the apache2 package. null pointer dereference in modproxy in Apache HTTP Server 2...
CLEANSTART-2026-BD98589 partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2
Security vulnerability affects the apache2 package. A partial fix for CVE-2024-39884 in the core of Apache HTTP Server 2...
CLEANSTART-2026-EM71520 Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses
Security vulnerability affects the apache2 package. Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to split HTTP responses...
CLEANSTART-2026-YD28238 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-YQ31003 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-TY25430 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-CW76652 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-IE39566 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-WH43251 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-QR87061 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-CG08650 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-OQ39308 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-PD49878 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-IP96561 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-TN63603 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-LD97842 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-DZ64581 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-YK12318 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-XA70442 Mako is a template library written in Python
Security vulnerability affects the apache-superset package. Mako is a template library written in Python...
CLEANSTART-2026-TV45483 urllib3 is an HTTP client library for Python
Security vulnerability affects the apache-superset package. urllib3 is an HTTP client library for Python...
CLEANSTART-2026-GA98365 PyJWT is a Python implementation of JSON Web Token standards
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of JSON Web Token standards...
CLEANSTART-2026-QB35477 geopy is a geocoding library for Python
CVE-2026-77387 affects multiple packages. geopy is a geocoding library for Python. See references for individual vulnerability details...
CLEANSTART-2026-JH53704 Werkzeug is a comprehensive WSGI web application library
CVE-2026-102598 affects multiple packages. Werkzeug is a comprehensive WSGI web application library. See references for individual vulnerability details...
CLEANSTART-2026-GS69152 When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, ...
Security vulnerability affects the php package. When the http:// stream wrapper follows a redirect it forwards the user-supplied Authorization, Cookie and Proxy-Authorization headers unchanged, even when the redirect target is a different host, a different port, or a downgrade from HTTPS to HTTP...
CLEANSTART-2026-XM64150 IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen
Security vulnerability affects the php package. The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen...
CLEANSTART-2026-NP31070 When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location
Security vulnerability affects the php package. When the HTTP stream wrapper follows a redirect and the response carries a Location header with an empty value, the redirect code reads one byte past the end of the heap buffer holding the location...
CLEANSTART-2026-AU05968 PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name
Security vulnerability affects the php package. PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name...
CLEANSTART-2026-OZ96009 Security fix for GHSA-ch8v-r6jh-4vvr applied in: php 8.3.35-r0
Security vulnerability affects the php package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-JC19240 php_openssl_matches_wildcard_name() in ext/openssl/xp_ssl
Security vulnerability affects the php package. phpopensslmatcheswildcardname in ext/openssl/xpssl...
CLEANSTART-2026-PP41218 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level with no depth limit
Security vulnerability affects the php package. cleanupxmlnode in the SOAP XML parser recurses once per XML nesting level with no depth limit...
CLEANSTART-2026-HM12202 convert
Security vulnerability affects the php package. The convert...
CLEANSTART-2026-ZN45327 phar_tar_number() parses the octal size field of a TAR header into a uint32_t with no overflow check
Security vulnerability affects the php package. phartarnumber parses the octal size field of a TAR header into a uint32t with no overflow check...
CLEANSTART-2026-UY82629 mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them
Security vulnerability affects the php package. The mysqlnd wire protocol parser reads fields out of server packets before checking that the packet still holds enough bytes for them...
CLEANSTART-2026-WW44198 SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger
Security vulnerability affects the php package. The SOAP HTTP client guards its response buffer growth with a check that relies on signed integer overflow, which is undefined behaviour and is not guaranteed to trigger...
CLEANSTART-2026-QV19791 Security fix for GHSA-gcjh-h69q-9w9g applied in: external-secrets-operator-fips 2.12.0-r1, flux-helm-controller 1.6.4-r1
GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VN99750 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-VP35771 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-AH23737 oras-go is a Go library for managing OCI artifacts
Security vulnerability affects the flux-helm-controller package. oras-go is a Go library for managing OCI artifacts...
CLEANSTART-2026-CC29276 Security fix for GHSA-259r-337f-4rfw applied in: node-problem-detector 0.8.25-r1
Security vulnerability affects the node-problem-detector package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-XV27173 norm
CVE-2026-56852 affects multiple packages. A norm. See references for individual vulnerability details...
CLEANSTART-2026-YK40300 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-PV83976 Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree
CVE-2026-42502 affects multiple packages. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. See references for individual vulnerability details...
CLEANSTART-2026-GD06163 Prometheus is an open-source monitoring system and time series database
Security vulnerability affects the node-problem-detector package. Prometheus is an open-source monitoring system and time series database...
CLEANSTART-2026-SV16183 NewNTUnicodeString does not check for string length overflow
CVE-2026-39824 affects multiple packages. NewNTUnicodeString does not check for string length overflow. See references for individual vulnerability details...