19450 matches found
CLEANSTART-2026-YF49105 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python
Security vulnerability affects the apache-superset package. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python...
CLEANSTART-2026-WV85178 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python
Security vulnerability affects the apache-superset package. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python...
CLEANSTART-2026-LP02945 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python
Security vulnerability affects the apache-superset package. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python...
CLEANSTART-2026-XW82868 Flask-AppBuilder is an application development framework, built on top of the Flask web framework
Security vulnerability affects the apache-superset package. Flask-AppBuilder is an application development framework, built on top of the Flask web framework...
CLEANSTART-2026-WV77890 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python
Security vulnerability affects the apache-superset package. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python...
CLEANSTART-2026-PT89967 aiohttp is an asynchronous HTTP client/server framework for asyncio and Python
Security vulnerability affects the apache-superset package. aiohttp is an asynchronous HTTP client/server framework for asyncio and Python...
CLEANSTART-2026-GC08220 Flask-AppBuilder is an application development framework, built on top of the Flask web framework
Security vulnerability affects the apache-superset package. Flask-AppBuilder is an application development framework, built on top of the Flask web framework...
CLEANSTART-2026-FE07697 This affects the package celery before 5
Security vulnerability affects the apache-superset package. This affects the package celery before 5...
CLEANSTART-2026-VN36417 NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4
Security vulnerability affects the apache-superset package. NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4...
CLEANSTART-2026-QJ55505 Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain
Security vulnerability affects the apache-superset package. Selenium Server Grid before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain...
CLEANSTART-2026-UB88543 Werkzeug is a comprehensive WSGI web application library
Security vulnerability affects the apache-superset package. Werkzeug is a comprehensive WSGI web application library...
CLEANSTART-2026-NH36624 Jinja is an extensible templating engine
Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine...
CLEANSTART-2026-KQ75263 Flask-AppBuilder is a development framework built on top of Flask
Security vulnerability affects the apache-superset package. Flask-AppBuilder is a development framework built on top of Flask...
CLEANSTART-2026-PK48356 Jinja is an extensible templating engine
Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine...
CLEANSTART-2026-WP21635 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-116585 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...
CLEANSTART-2026-GM17380 In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found
CVE-2026-97045 affects multiple packages. In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. See references for individual vulnerability details...
CLEANSTART-2026-NY38871 When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n
CVE-2026-78661 affects multiple packages. When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n. See references for individual vulnerability details...
CLEANSTART-2026-WE07714 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-116586 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...
CLEANSTART-2026-OI48555 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
CVE-2026-116587 affects multiple packages. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards. See references for individual vulnerabilit...
CLEANSTART-2026-KE54242 On most platforms, Go uses the given system root certificates
Security vulnerability affects the haproxy-ingress package. On most platforms, Go uses the given system root certificates...
CLEANSTART-2026-MB48143 gRPC-Go is the Go language implementation of gRPC
CVE-2026-84445 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details...
CLEANSTART-2026-BF43581 Security fix for GHSA-2v4p-qf9q-27wj applied in: cert-manager 1.20.5-r1
Security vulnerability affects the cert-manager package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-SA08494 Werkzeug is a comprehensive WSGI web application library
Security vulnerability affects the apache-superset package. Werkzeug is a comprehensive WSGI web application library...
CLEANSTART-2026-NQ44046 Werkzeug is a comprehensive WSGI web application library
Security vulnerability affects the apache-superset package. Werkzeug is a comprehensive WSGI web application library...
CLEANSTART-2026-AT25297 Werkzeug is a Web Server Gateway Interface web application library
Security vulnerability affects the apache-superset package. Werkzeug is a Web Server Gateway Interface web application library...
CLEANSTART-2026-HB43127 Werkzeug is a comprehensive WSGI web application library
Security vulnerability affects the apache-superset package. Werkzeug is a comprehensive WSGI web application library...
CLEANSTART-2026-HH05689 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-EV88184 Jinja is an extensible templating engine
Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine...
CLEANSTART-2026-TH54480 Flask-Caching extension through 1
Security vulnerability affects the apache-superset package. The Flask-Caching extension through 1...
CLEANSTART-2026-RW27052 Jinja is an extensible templating engine
Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine...
CLEANSTART-2026-VE52638 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-YX75368 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-CY25478 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-DZ29568 PyJWT is a Python implementation of RFC 7519
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of RFC 7519...
CLEANSTART-2026-PH23926 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
Security vulnerability affects the rabbitmq-cluster-operator package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently...
CLEANSTART-2026-ND67671 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the rabbitmq-cluster-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-NH23437 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing
Security vulnerability affects the rabbitmq-cluster-operator package. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing...
CLEANSTART-2026-UR29764 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
Security vulnerability affects the rabbitmq-cluster-operator package. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
CLEANSTART-2026-XV44707 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
Security vulnerability affects the rabbitmq-cluster-operator package. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the...
CLEANSTART-2026-XY43119 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the rabbitmq-messaging-topology-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-CL45138 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the rabbitmq-messaging-topology-operator package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-HS63877 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the rabbitmq-messaging-topology-operator package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-NJ93405 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy
Security vulnerability affects the grafana package. Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy...
CLEANSTART-2026-TJ33106 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...
Security vulnerability affects the grafana package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...
CLEANSTART-2026-BX48253 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...
CLEANSTART-2026-AW13216 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
Security vulnerability affects the sonarqube package. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API...
CLEANSTART-2023-LZ38620 tcpdump 4
Security vulnerability affects the tcpdump package. tcpdump 4...
CLEANSTART-2023-MC01914 ISO CLNS parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ISO CLNS parser in tcpdump before 4...