11796 matches found
CLEANSTART-2026-DP99437 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-VG66831 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-QF48371 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
Security vulnerability affects the spark-sc212-jdk17-py311 package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...
CLEANSTART-2026-SX32964 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-SE44846 Netty is a network application framework for development of protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is a network application framework for development of protocol servers and clients...
CLEANSTART-2026-WQ78814 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-OB06695 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-ZP44321 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-BN09286 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-UR63455 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-FA85368 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-GO10860 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-GM49347 Apache Log4j Core's XmlLayout https://logging
Security vulnerability affects the spark-sc212-jdk17-py311 package. Apache Log4j Core's XmlLayout https://logging...
CLEANSTART-2026-VY95094 Netty allows request-line validation to be bypassed when a `DefaultHttpRequest` or `DefaultFullHttpRequest` is created first and its URI is later changed via `setUri()`
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty allows request-line validation to be bypassed when a DefaultHttpRequest or DefaultFullHttpRequest is created first and its URI is later changed via setUri...
CLEANSTART-2026-GW86512 Apache Log4j Core's Rfc5424Layout https://logging
Security vulnerability affects the spark-sc212-jdk17-py311 package. Apache Log4j Core's Rfc5424Layout https://logging...
CLEANSTART-2026-PC14527 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-KO79876 fix for CVE-2025-68161 https://logging
Security vulnerability affects the spark-sc212-jdk17-py311 package. The fix for CVE-2025-68161 https://logging...
CLEANSTART-2026-RX34161 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-HA94391 Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...
CLEANSTART-2026-EA68538 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-IO60317 Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework...
CLEANSTART-2026-NH27308 Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous event-driven network application framework for development of maintainable high performance protocol servers and clients...
CLEANSTART-2026-FL97476 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor
Security vulnerability affects the spark-sc212-jdk17-py311 package. jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...
CLEANSTART-2026-PX86604 In Eclipse Jersey versions 2
Security vulnerability affects the spark-sc212-jdk17-py311 package. In Eclipse Jersey versions 2...
CLEANSTART-2026-KK42580 flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value
Security vulnerability affects the spark-sc212-jdk17-py311 package. A flaw was found in Red Hat's AMQ-Streams, which ships a version of the OKHttp component with an information disclosure flaw via an exception triggered by a header containing an illegal value...
CLEANSTART-2026-VU46471 Security fix for GHSA-9g5q-2w5x-hmxf applied in: step-ca 0.28.4-r5
Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-UC45945 Security fix for GHSA-rjr7-jggh-pgcp applied in: step-ca 0.28.4-r5
Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-SZ57384 Security fix for GHSA-3fxj-6jh8-hvhx applied in: step-ca 0.28.4-r5
Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-BP11951 In verifyHostName of OkHostnameVerifier
Security vulnerability affects the spark-sc212-jdk17-py311 package. In verifyHostName of OkHostnameVerifier...
CLEANSTART-2026-ZK17836 Slack Nebula before 1
Security vulnerability affects the step-ca package. Slack Nebula before 1...
CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5
Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...
CLEANSTART-2026-FB73701 Nebula is a scalable overlay networking tool
Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...
CLEANSTART-2026-KS26010 flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins ("*"), reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Acces...
Security vulnerability affects the wildfly package. A flaw was found in RESTEasy's CorsFilter, which, when configured to allow all origins "", reflects the request's Origin header back in the Access-Control-Allow-Origin response together with Access-Control-Allow-Credentials: true...
CLEANSTART-2026-QC55250 Security fix for GHSA-w8rr-5gcm-pp58 applied in: loki 3.7.1-r0
Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-EI91095 Security fix for GHSA-78h2-9frx-2jm8 applied in: loki 3.7.1-r0
Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-NA25366 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: loki 3.7.1-r0
Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-DU50032 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the loki package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-US79386 Security fix for GHSA-hfvc-g4fc-pqhx applied in: loki 3.7.1-r0
Security vulnerability affects the loki package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-OJ26404 Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation wou...
Security vulnerability affects the loki package. Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped...
CLEANSTART-2026-NH53620 Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...
Security vulnerability affects the loki package. Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption JWE, JSON Web Signature JWS, and JSON Web Token JWT standards...
CLEANSTART-2026-PN24745 authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users
Security vulnerability affects the loki package. An authenticated SSH client that repeatedly opened channels which were rejected by the server caused unbounded memory growth, eventually crashing the server process and affecting all connected users...
CLEANSTART-2026-TA77263 malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop
Security vulnerability affects the loki package. A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop...
CLEANSTART-2026-UN89941 When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty pa...
Security vulnerability affects the loki package. When writing data larger than 4GB in a single Write call on an SSH channel, an integer overflow in the internal payload size calculation caused the write loop to spin indefinitely, sending empty packets without making progress...
CLEANSTART-2026-WU91498 When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh
Security vulnerability affects the loki package. When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh...
CLEANSTART-2026-ZW28198 Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation
Security vulnerability affects the loki package. Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation...
CLEANSTART-2026-WW85548 incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs
Security vulnerability affects the loki package. An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs...
CLEANSTART-2026-SR68419 Verify() method for FIDO/U2F security key types (sk-ecdsa-sha2-nistp256@openssh
Security vulnerability affects the loki package. The Verify method for FIDO/U2F security key types sk-ecdsa-sha2-nistp256@openssh...
CLEANSTART-2026-ZA34964 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the loki package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-HX71601 in-memory keyring returned by NewKeyring() silently accepted keys with the ConfirmBeforeUse constraint but never enforced it
Security vulnerability affects the loki package. The in-memory keyring returned by NewKeyring silently accepted keys with the ConfirmBeforeUse constraint but never enforced it...
CLEANSTART-2026-UP76614 RSA and DSA public key parsers did not enforce size limits on key parameters
Security vulnerability affects the loki package. The RSA and DSA public key parsers did not enforce size limits on key parameters...