11796 matches found
CLEANSTART-2026-HO72909 Allocation of Resources Without Limits or Throttling (CWE-770) in Elasticsearch can lead to a denial of service via Excessive Allocation (CAPEC-130)
Security vulnerability affects the sonarqube package. Allocation of Resources Without Limits or Throttling CWE-770 in Elasticsearch can lead to a denial of service via Excessive Allocation CAPEC-130...
CLEANSTART-2026-HE25090 Browserslist is a configuration tool for sharing target browsers and Node
Security vulnerability affects the argo-workflows package. Browserslist is a configuration tool for sharing target browsers and Node...
CLEANSTART-2026-FF14094 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-TZ09110 Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion
CVE-2026-56859 affects multiple packages. Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion. See references for individual vulnerability details...
CLEANSTART-2026-WC26627 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-VJ64533 Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not
CVE-2026-56862 affects multiple packages. Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. See references for individual vulnerability details...
CLEANSTART-2026-YL84506 On Unix systems, opening a file in an os
Security vulnerability affects the argo-workflows package. On Unix systems, opening a file in an os...
CLEANSTART-2026-ES07663 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-QY36065 Uncontrolled Resource Consumption vulnerability in the HTTP/1
Security vulnerability affects the sonarqube package. Uncontrolled Resource Consumption vulnerability in the HTTP/1...
CLEANSTART-2026-MV24279 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
CVE-2026-54515 affects multiple packages. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. See references for individual vulnerability details...
CLEANSTART-2026-KU83313 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-PL58234 ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
CVE-2026-39821 affects multiple packages. The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. See references for individual vulnerability details...
CLEANSTART-2026-CU60639 net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines
Security vulnerability affects the argo-workflows package. The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines...
CLEANSTART-2026-MM56894 Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core (5
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling in the HTTP/2 HPACK decoder in Apache HttpComponents Core 5...
CLEANSTART-2026-PV37228 Security fix for GHSA-5p4m-2wfm-xmqj applied in: argo-workflows 4.0.12-r1
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-CG97274 jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor
Security vulnerability affects the sonarqube package. jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor...
CLEANSTART-2026-RI71860 js-yaml is a JavaScript YAML parser and dumper
Security vulnerability affects the argo-workflows package. js-yaml is a JavaScript YAML parser and dumper...
CLEANSTART-2026-YK52192 In Bouncy Castle for Java before 1
CVE-2026-13586 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-ZC37242 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322
Security vulnerability affects the argo-workflows package. Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322...
CLEANSTART-2026-UC28835 Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
CVE-2026-33818 affects multiple packages. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures. See references for individual vulnerability details...
CLEANSTART-2026-ZD25071 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations
Security vulnerability affects the argo-workflows package. Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations...
CLEANSTART-2026-UD61753 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Security vulnerability affects the argo-workflows package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...
CLEANSTART-2026-MO36230 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0
Security vulnerability affects the argo-workflows package. When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGSMAXFRAMESIZE with a value of 0...
CLEANSTART-2026-OJ90218 When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface
CVE-2026-56853 affects multiple packages. When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. See references for individual vulnerability details...
CLEANSTART-2026-HB84479 Path-traversal vulnerability in QOS
Security vulnerability affects the sonarqube package. Path-traversal vulnerability in QOS...
CLEANSTART-2026-FQ89941 form-data is a library for creating readable multipart/form-data streams
Security vulnerability affects the argo-workflows package. form-data is a library for creating readable multipart/form-data streams...
CLEANSTART-2026-TR21269 Netty is a network application framework for development of protocol servers and clients
CVE-2026-45536 affects multiple packages. Netty is a network application framework for development of protocol servers and clients. See references for individual vulnerability details...
CLEANSTART-2026-GT01967 non-blocking (asynchronous) JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints (default: 1000 characters)
CVE-2026-18401 affects multiple packages. The non-blocking asynchronous JSON parser in jackson-core does not enforce the maxNumberLength constraint defined in StreamReadConstraints default: 1000 characters. See references for individual vulnerability details...
CLEANSTART-2026-EW49412 Dial and LookupPort functions panic on Windows when provided with an input containing a NUL (0)
Security vulnerability affects the argo-workflows package. The Dial and LookupPort functions panic on Windows when provided with an input containing a NUL 0...
CLEANSTART-2026-KA44549 jackson-databind's deserializer for java
CVE-2026-19032 affects multiple packages. jackson-databind's deserializer for java. See references for individual vulnerability details...
CLEANSTART-2026-JO05772 In Bouncy Castle for Java before 1
CVE-2026-14682 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-YB90925 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-YF88900 In Bouncy Castle for Java before 1
CVE-2026-12816 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-EQ05697 In Bouncy Castle for Java before 1
CVE-2026-13506 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-CI27531 brace-expansion library generates arbitrary strings containing a common prefix and suffix
Security vulnerability affects the argo-workflows package. The brace-expansion library generates arbitrary strings containing a common prefix and suffix...
CLEANSTART-2026-BT04209 In Bouncy Castle for Java before 1
CVE-2026-12185 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-NJ03558 brace-expansion through 5
Security vulnerability affects the argo-workflows package. brace-expansion through 5...
CLEANSTART-2026-TE21227 brace-expansion library generates arbitrary strings containing a common prefix and suffix
CVE-2026-69152 affects multiple packages. The brace-expansion library generates arbitrary strings containing a common prefix and suffix. See references for individual vulnerability details...
CLEANSTART-2026-CT50806 proxy-addr is a Node
Security vulnerability affects the argo-workflows package. proxy-addr is a Node...
CLEANSTART-2026-LI51874 ajv (Another JSON Schema Validator) before 8
Security vulnerability affects the argo-workflows package. ajv Another JSON Schema Validator before 8...
CLEANSTART-2026-LF83973 NPM package `braces`, versions prior to 3
Security vulnerability affects the argo-workflows package. The NPM package braces, versions prior to 3...
CLEANSTART-2026-UX64069 brace-expansion through 5
Security vulnerability affects the argo-workflows package. brace-expansion through 5...
CLEANSTART-2026-MX96340 In Bouncy Castle for Java before 1
CVE-2026-12803 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-JD77118 Versions of the package cross-spawn before 6
Security vulnerability affects the argo-workflows package. Versions of the package cross-spawn before 6...
CLEANSTART-2026-IQ33916 compression is a Node
Security vulnerability affects the argo-workflows package. compression is a Node...
CLEANSTART-2026-SP20154 ACE vulnerability in conditional configuration file processing by QOS
Security vulnerability affects the sonarqube package. ACE vulnerability in conditional configuration file processing by QOS...
CLEANSTART-2026-YH31321 Deserialization of untrusted data vulnerability in QOS
Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...
CLEANSTART-2026-GD25733 In Bouncy Castle for Java before 1
Security vulnerability affects the sonarqube package. In Bouncy Castle for Java before 1...
CLEANSTART-2026-GU33200 In Bouncy Castle for Java before 1
CVE-2026-12860 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-IP32921 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...