11796 matches found
CLEANSTART-2026-IP32921 Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795
Security vulnerability affects the sonarqube package. Like many other SSH implementations, Apache MINA SSHD suffered from the issue that is more widely known as CVE-2023-48795...
CLEANSTART-2026-MI43337 websocket-driver is a WebSocket protocol handler with pluggable I/O
Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O...
CLEANSTART-2026-IW41585 Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP)
Security vulnerability affects the argo-workflows package. Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution HPP...
CLEANSTART-2026-YP71485 Immutable
Security vulnerability affects the argo-workflows package. Immutable...
CLEANSTART-2026-ET86830 Deserialization of untrusted data vulnerability in QOS
Security vulnerability affects the sonarqube package. Deserialization of untrusted data vulnerability in QOS...
CLEANSTART-2026-GU43525 In Jakarta Mail versions prior to 2
Security vulnerability affects the sonarqube package. In Jakarta Mail versions prior to 2...
CLEANSTART-2026-IC85563 In Eclipse Parsson published Maven Central artifacts before version 1
Security vulnerability affects the sonarqube package. In Eclipse Parsson published Maven Central artifacts before version 1...
CLEANSTART-2026-YC34424 In Bouncy Castle for Java before 1
CVE-2026-8763 affects multiple packages. In Bouncy Castle for Java before 1. See references for individual vulnerability details...
CLEANSTART-2026-EP87494 pgjdbc is an open source postgresql JDBC Driver
Security vulnerability affects the sonarqube package. pgjdbc is an open source postgresql JDBC Driver...
CLEANSTART-2026-JC29454 shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`
Security vulnerability affects the argo-workflows package. shell-quote's quote function did not validate object-token inputs against the operator model used by parse...
CLEANSTART-2026-MW03453 Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript
Security vulnerability affects the argo-workflows package. Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript...
CLEANSTART-2026-SB96942 flatted is a circular JSON parser
Security vulnerability affects the argo-workflows package. flatted is a circular JSON parser...
CLEANSTART-2026-YS82863 mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource con...
Security vulnerability affects the sonarqube package. A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service DoS...
CLEANSTART-2026-VX89697 sqlparse is a non-validating SQL parser module for Python
CVE-2026-59894 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...
CLEANSTART-2026-WC97010 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers
Security vulnerability affects the apache-superset package. cryptography is a package designed to expose cryptographic primitives and recipes to Python developers...
CLEANSTART-2026-HH21892 sqlparse is a non-validating SQL parser module for Python
CVE-2026-71491 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...
CLEANSTART-2026-JM61604 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-VD54989 sqlparse is a non-validating SQL parser module for Python
CVE-2026-59893 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...
CLEANSTART-2026-XN67293 sqlparse is a non-validating SQL parser module for Python
CVE-2026-54284 affects multiple packages. sqlparse is a non-validating SQL parser module for Python. See references for individual vulnerability details...
CLEANSTART-2026-AQ64279 ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript
Security vulnerability affects the apache-superset package. ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript...
CLEANSTART-2026-MF55431 go-git is an extensible git implementation library written in pure Go
CVE-2026-71557 affects multiple packages. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-JT96055 go-git is an extensible git implementation library written in pure Go
CVE-2026-71556 affects multiple packages. go-git is an extensible git implementation library written in pure Go. See references for individual vulnerability details...
CLEANSTART-2026-FB66961 zstd-jni versions before 1
Security vulnerability affects the kafka package. zstd-jni versions before 1...
CLEANSTART-2026-UC40793 zstd-jni before 1
Security vulnerability affects the kafka package. zstd-jni before 1...
CLEANSTART-2026-LG38764 zstd-jni before 1
Security vulnerability affects the kafka package. zstd-jni before 1...
CLEANSTART-2026-QD39247 zstd-jni versions 1
Security vulnerability affects the kafka package. zstd-jni versions 1...
CLEANSTART-2026-UP93345 vulnerability has been found in luben zstd-jni up to 1
Security vulnerability affects the kafka package. A vulnerability has been found in luben zstd-jni up to 1...
CLEANSTART-2026-CN35932 zstd-jni versions 1
Security vulnerability affects the kafka package. zstd-jni versions 1...
CLEANSTART-2026-UX53854 zstd-jni versions 1
Security vulnerability affects the kafka package. zstd-jni versions 1...
CLEANSTART-2026-II74708 zstd-jni before 1
Security vulnerability affects the kafka package. zstd-jni before 1...
CLEANSTART-2026-NE87407 zstd-jni versions before 1
Security vulnerability affects the kafka package. zstd-jni versions before 1...
CLEANSTART-2026-YI14989 JLine is a Java library for handling console input
CVE-2026-77422 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
CLEANSTART-2026-HU83595 client may issue specially crafted HTTP/1
Security vulnerability affects the kafka package. A client may issue specially crafted HTTP/1...
CLEANSTART-2026-JE20809 JLine is a Java library for handling console input
CVE-2026-77421 affects multiple packages. JLine is a Java library for handling console input. See references for individual vulnerability details...
CLEANSTART-2026-JC61209 In Eclipse Jetty, an HTTP URI of this form: /public;/
Security vulnerability affects the kafka package. In Eclipse Jetty, an HTTP URI of this form: /public;/...
CLEANSTART-2026-CI10932 In Eclipse Jetty, a first HTTP/1
Security vulnerability affects the kafka package. In Eclipse Jetty, a first HTTP/1...
CLEANSTART-2026-PQ26679 In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present)
Security vulnerability affects the kafka package. In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority host and port matches what provided in the Host header if present...
CLEANSTART-2026-MV63007 Security fix for GHSA-6v7p-g79w-8964 applied in: k8s-sidecar 2.10.3-r1
Security vulnerability affects the k8s-sidecar package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-XW51025 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
Security vulnerability affects the k8s-sidecar package. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages...
CLEANSTART-2026-PH11243 pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels
Security vulnerability affects the k8s-sidecar package. pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels...
CLEANSTART-2026-SC86417 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages
CVE-2025-47273 affects multiple packages. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. See references for individual vulnerability details...
CLEANSTART-2026-XU35369 In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes
Security vulnerability affects the kafka package. In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes...
CLEANSTART-2026-ZD80119 MessagePack is the serializer implementation for Python msgpack
CVE-2026-57585 affects multiple packages. MessagePack is the serializer implementation for Python msgpack. See references for individual vulnerability details...
CLEANSTART-2026-HE89623 Security fix for GHSA-gcjh-h69q-9w9g applied in: kube-state-metrics-fips 2.18.0-r3, kube-state-metrics-fips 2.19.1-r1, istio-pilot-discovery 1.31.1-r0
GHSA-gcjh-h69q-9w9g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NU58137 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the opentelemetry-collector-contrib package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-AL44368 OpenTelemetry-Go is the Go implementation of OpenTelemetry
CVE-2026-81870 affects multiple packages. OpenTelemetry-Go is the Go implementation of OpenTelemetry. See references for individual vulnerability details...
CLEANSTART-2026-WM90638 Security fix for GHSA-259r-337f-4rfw applied in: grafana-alloy 1.16.3-r0
Security vulnerability affects the grafana-alloy package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EM39649 malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go ...
CVE-2026-56865 affects multiple packages. A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache. See references for individual vulnerabilit...
CLEANSTART-2026-VL04075 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...
CVE-2026-56854 affects multiple packages. The source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2026-46595. See references for individual vulnerability...