11796 matches found
CLEANSTART-2024-OM41616 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2026-MD34208 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit
Security vulnerability affects the buildkitd package. Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit...
CLEANSTART-2024-JY83809 Composer is a dependency Manager for the PHP language
Security vulnerability affects the composer package. Composer is a dependency Manager for the PHP language...
CLEANSTART-2026-RN20135 Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion
Security vulnerability affects the buildkitd package. Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...
CLEANSTART-2024-DD29597 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2024-TM83377 HashiCorp Consul Template up to 0
Security vulnerability affects the consul-template package. HashiCorp Consul Template up to 0...
CLEANSTART-2026-LO15430 tar
Security vulnerability affects the buildkitd package. tar...
CLEANSTART-2024-ND02975 Composer is a dependency manager for PHP
Security vulnerability affects the composer package. Composer is a dependency manager for PHP...
CLEANSTART-2026-AW80260 Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL
Security vulnerability affects the buildkitd package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...
CLEANSTART-2026-MQ70542 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "
Security vulnerability affects the buildkitd package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", "...
CLEANSTART-2024-VF39439 gdhcp in ConnMan before 1
Security vulnerability affects the connman package. gdhcp in ConnMan before 1...
CLEANSTART-2024-IF16479 stack-based buffer overflow in dnsproxy in ConnMan before 1
Security vulnerability affects the connman package. A stack-based buffer overflow in dnsproxy in ConnMan before 1...
CLEANSTART-2026-QD51578 Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information
Security vulnerability affects the buildkitd package. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...
CLEANSTART-2024-JE78408 issue was discovered in the DNS proxy in Connman through 1
Security vulnerability affects the connman package. An issue was discovered in the DNS proxy in Connman through 1...
CLEANSTART-2024-TX08418 issue was discovered in the DNS proxy in Connman through 1
Security vulnerability affects the connman package. An issue was discovered in the DNS proxy in Connman through 1...
CLEANSTART-2026-DU53299 Security fix for GHSA-4f99-4q7p-p3gh applied in: buildkitd 0.26.3-r0
Security vulnerability affects the buildkitd package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2024-HH25649 issue was discovered in the DNS proxy in Connman through 1
Security vulnerability affects the connman package. An issue was discovered in the DNS proxy in Connman through 1...
CLEANSTART-2026-XQ55860 Within HostnameError
Security vulnerability affects the buildkitd package. Within HostnameError...
CLEANSTART-2026-AY14774 ParseAddress function constructs domain-literal address components through repeated string concatenation
Security vulnerability affects the buildkitd package. The ParseAddress function constructs domain-literal address components through repeated string concatenation...
CLEANSTART-2026-DV62893 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Security vulnerability affects the buildkitd package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input...
CLEANSTART-2026-FX38492 Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method
Security vulnerability affects the buildkitd package. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method...
CLEANSTART-2026-UA69127 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Security vulnerability affects the buildkitd package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...
CLEANSTART-2026-CX75671 Cancelling a query (e
Security vulnerability affects the buildkitd package. Cancelling a query e...
CLEANSTART-2026-DA21677 go command may execute unexpected commands when operating in untrusted VCS repositories
Security vulnerability affects the buildkitd package. The go command may execute unexpected commands when operating in untrusted VCS repositories...
CLEANSTART-2026-RQ84574 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Security vulnerability affects the buildkitd package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...
CLEANSTART-2024-OZ46983 When instructing cloud-init to set a random password for a new user account, versions before 21
Security vulnerability affects the cloud-init package. When instructing cloud-init to set a random password for a new user account, versions before 21...
CLEANSTART-2024-KC01798 Heap-based buffer overflow in the parse_packet function in network
Security vulnerability affects the collectd package. Heap-based buffer overflow in the parsepacket function in network...
CLEANSTART-2024-WH54891 Sensitive data could be exposed in world readable logs of cloud-init before version 22
Security vulnerability affects the cloud-init package. Sensitive data could be exposed in world readable logs of cloud-init before version 22...
CLEANSTART-2024-JF46935 Sensitive data could be exposed in logs of cloud-init before version 23
Security vulnerability affects the cloud-init package. Sensitive data could be exposed in logs of cloud-init before version 23...
CLEANSTART-2026-OM64011 On Unix platforms, when listing the contents of a directory using File
Security vulnerability affects the buildkitd package. On Unix platforms, when listing the contents of a directory using File...
CLEANSTART-2024-CU29214 cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C
Security vulnerability affects the cmark package. cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C...
CLEANSTART-2024-QB51386 issue in Clojure versions 1
Security vulnerability affects the clojure package. An issue in Clojure versions 1...
CLEANSTART-2023-MR39642 common/session
Security vulnerability affects the claws-mail package. common/session...
CLEANSTART-2026-GK03402 Actions which insert URLs into the content attribute of HTML meta tags are not escaped
Security vulnerability affects the buildkitd package. Actions which insert URLs into the content attribute of HTML meta tags are not escaped...
CLEANSTART-2023-AQ06363 In imap_scan_tree_recursive in Claws Mail through 3
Security vulnerability affects the claws-mail package. In imapscantreerecursive in Claws Mail through 3...
CLEANSTART-2024-DG53593 path traversal flaw was found in Buildah in versions before 1
Security vulnerability affects the buildah package. A path traversal flaw was found in Buildah in versions before 1...
CLEANSTART-2024-OS27994 improper limitation of path name flaw was found in containernetworking/cni in versions before 0
Security vulnerability affects the buildah package. An improper limitation of path name flaw was found in containernetworking/cni in versions before 0...
CLEANSTART-2024-UF47484 information disclosure flaw was found in Buildah, when building containers using chroot isolation
Security vulnerability affects the buildah package. An information disclosure flaw was found in Buildah, when building containers using chroot isolation...
CLEANSTART-2024-MV49832 incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to t...
Security vulnerability affects the buildah package. An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data modification if an attacker has direct access to the affected container where supplementary...
CLEANSTART-2024-IU89203 SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9
Security vulnerability affects the buildah package. The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9...
CLEANSTART-2024-IV40707 OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption (JOSE)
Security vulnerability affects the cjose package. OpenIDC/cjose is a C library implementing the Javascript Object Signing and Encryption JOSE...
CLEANSTART-2024-SY26301 Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards
Security vulnerability affects the buildah package. Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards...
CLEANSTART-2024-WE55879 protojson
Security vulnerability affects the buildah package. The protojson...
CLEANSTART-2023-EI38317 "process-execute" and "process-spawn" procedures did not free memory correctly when the execve() call failed, resulting in a memory leak
Security vulnerability affects the chicken package. The "process-execute" and "process-spawn" procedures did not free memory correctly when the execve call failed, resulting in a memory leak...
CLEANSTART-2024-VD14033 flaw was found in the github
Security vulnerability affects the buildah package. A flaw was found in the github...
CLEANSTART-2024-XJ51471 flaw was found in Buildah (and subsequently Podman Build) which allows containers to mount arbitrary locations on the host filesystem into build containers
Security vulnerability affects the buildah package. A flaw was found in Buildah and subsequently Podman Build which allows containers to mount arbitrary locations on the host filesystem into build containers...
CLEANSTART-2023-NZ21733 "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve() call
Security vulnerability affects the chicken package. The "process-execute" and "process-spawn" procedures in CHICKEN Scheme used fixed-size buffers for holding the arguments and environment variables to use in its execve call...
CLEANSTART-2024-AV70619 vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction
Security vulnerability affects the buildah package. A vulnerability exists in the bind-propagation option of the Dockerfile RUN --mount instruction...
CLEANSTART-2023-CR50278 incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4
Security vulnerability affects the chicken package. An incorrect "pair?" check in the Scheme "length" procedure results in an unsafe pointer dereference in all CHICKEN Scheme versions prior to 4...