11796 matches found
CLEANSTART-2026-XL02389 Netty is an asynchronous, event-driven network application framework
CVE-2026-75596 affects multiple packages. Netty is an asynchronous, event-driven network application framework. See references for individual vulnerability details...
CLEANSTART-2026-CC86390 Security fix for GHSA-q83h-524g-xf6h applied in: ztunnel-fips 1.29.8-r0, ztunnel-fips 1.30.5-r0
GHSA-q83h-524g-xf6h affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SR26981 Security fix for GHSA-r7wm-3cxj-wff9 applied in: spark-sc212-jdk17-py311 3.4.4-r1, sonarqube 26.7.0.124771-r4
GHSA-r7wm-3cxj-wff9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-SH15546 Security fix for GHSA-2m67-wjpj-xhg9 applied in: sonarqube 26.7.0.124771-r4
Security vulnerability affects the sonarqube package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-JI34331 Netty versions 4
CVE-2026-89044 affects multiple packages. Netty versions 4. See references for individual vulnerability details...
CLEANSTART-2026-HR33397 DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator
CVE-2026-83557 affects multiple packages. DefaultBaseTypeLimitingValidator is the PolymorphicTypeValidator applied automatically whenever @JsonTypeInfo is used without an explicitly configured custom validator. See references for individual vulnerability details...
CLEANSTART-2026-XL82569 Security fix for GHSA-mhm7-754m-9p8w applied in: spark-sc212-jdk17-py311 3.4.4-r1, sonarqube 26.7.0.124771-r4
GHSA-mhm7-754m-9p8w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VJ63292 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-59889 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-GA82552 Babel is a compiler for writing next generation JavaScript
Security vulnerability affects the argo-workflows package. Babel is a compiler for writing next generation JavaScript...
CLEANSTART-2026-QQ95975 Security fix for GHSA-5c6j-r48x-rmvq applied in: argo-workflows 4.0.12-r1
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RI59147 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-XS33213 shell-quote prior to 1
Security vulnerability affects the argo-workflows package. shell-quote prior to 1...
CLEANSTART-2026-QT94444 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-77310 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-YT66630 webpack-dev-server allows users to use webpack with a development server that provides live reloading
Security vulnerability affects the argo-workflows package. webpack-dev-server allows users to use webpack with a development server that provides live reloading...
CLEANSTART-2026-TI30417 jackson-databind binds a JSON string to a javax
CVE-2026-68497 affects multiple packages. jackson-databind binds a JSON string to a javax. See references for individual vulnerability details...
CLEANSTART-2026-QN85900 Picomatch is a glob matcher written JavaScript
Security vulnerability affects the argo-workflows package. Picomatch is a glob matcher written JavaScript...
CLEANSTART-2026-WP06328 fix released in jackson-core 2
CVE-2026-68494 affects multiple packages. The fix released in jackson-core 2. See references for individual vulnerability details...
CLEANSTART-2026-WO79894 websocket-driver is a WebSocket protocol handler with pluggable I/O
Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...
CLEANSTART-2026-GV24243 Serialize JavaScript to a superset of JSON that includes regular expressions and functions
Security vulnerability affects the argo-workflows package. Serialize JavaScript to a superset of JSON that includes regular expressions and functions...
CLEANSTART-2026-TI66876 Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5
CVE-2026-71290 affects multiple packages. Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5. See references for individual vulnerability details...
CLEANSTART-2026-ZQ97544 path-to-regexp turns path strings into a regular expressions
Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...
CLEANSTART-2026-NW68824 Impact: In body-parser versions prior to 1
Security vulnerability affects the argo-workflows package. Impact: In body-parser versions prior to 1...
CLEANSTART-2026-ER79648 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-BI32681 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLEANSTART-2026-XZ43182 launch-editor allows users to open files with line numbers in editor from Node
Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node...
CLEANSTART-2026-BB25914 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLEANSTART-2026-NK73842 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-WM89566 In Bouncy Castle for Java before 1
CVE-2026-58063 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-ZJ53876 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-MQ87842 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-TC19011 Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period (
Security vulnerability affects the argo-workflows package. Impact: A bad regular expression is generated any time you have three or more parameters within a single segment, separated by something that is not a period...
CLEANSTART-2026-XM48481 In Bouncy Castle for Java before 1
CVE-2026-59651 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-JP93433 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-EW82020 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-XR16357 In Bouncy Castle for Java before 1
CVE-2026-59650 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-VS62795 In Bouncy Castle for Java before 1
CVE-2026-58062 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-DV63106 path-to-regexp turns path strings into a regular expressions
Security vulnerability affects the argo-workflows package. path-to-regexp turns path strings into a regular expressions...
CLEANSTART-2026-TK63612 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-KQ19093 flatted is a circular JSON parser
Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...
CLEANSTART-2026-ZQ08771 In Bouncy Castle for Java before 1
CVE-2026-58060 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-KK18805 In Bouncy Castle for Java before 1
CVE-2026-58059 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-CI28358 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects
Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...
CLEANSTART-2026-KL34343 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects
Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...
CLEANSTART-2026-FU60890 moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates
Security vulnerability affects the argo-workflows package. moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates...
CLEANSTART-2026-JH16561 Improper certificate validation in Apache MINA SSHD (server-side)
Security vulnerability affects the sonarqube package. Improper certificate validation in Apache MINA SSHD server-side...
CLEANSTART-2026-QG94789 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-MI40861 Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Uncontrolled Recursion CWE-674 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-RQ08724 minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects
Security vulnerability affects the argo-workflows package. minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects...
CLEANSTART-2026-IH43299 Browserslist is a configuration tool for sharing target browsers and Node
Security vulnerability affects the argo-workflows package. Browserslist is a configuration tool for sharing target browsers and Node...