19476 matches found
CLEANSTART-2026-AT25297 Werkzeug is a Web Server Gateway Interface web application library
Security vulnerability affects the apache-superset package. Werkzeug is a Web Server Gateway Interface web application library...
CLEANSTART-2026-HH05689 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-HB43127 Werkzeug is a comprehensive WSGI web application library
Security vulnerability affects the apache-superset package. Werkzeug is a comprehensive WSGI web application library...
CLEANSTART-2026-EV88184 Jinja is an extensible templating engine
Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine...
CLEANSTART-2026-TH54480 Flask-Caching extension through 1
Security vulnerability affects the apache-superset package. The Flask-Caching extension through 1...
CLEANSTART-2026-RW27052 Jinja is an extensible templating engine
Security vulnerability affects the apache-superset package. Jinja is an extensible templating engine...
CLEANSTART-2026-VE52638 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-YX75368 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-CY25478 PyJWT is a JSON Web Token implementation in Python
Security vulnerability affects the apache-superset package. PyJWT is a JSON Web Token implementation in Python...
CLEANSTART-2026-DZ29568 PyJWT is a Python implementation of RFC 7519
Security vulnerability affects the apache-superset package. PyJWT is a Python implementation of RFC 7519...
CLEANSTART-2026-PH23926 HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently
Security vulnerability affects the rabbitmq-cluster-operator package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently...
CLEANSTART-2026-ND67671 When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request
Security vulnerability affects the rabbitmq-cluster-operator package. When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request...
CLEANSTART-2026-NH23437 Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing
Security vulnerability affects the rabbitmq-cluster-operator package. Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing...
CLEANSTART-2026-UR29764 malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW...
Security vulnerability affects the rabbitmq-cluster-operator package. A malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGSINITIALWINDOWSIZE values...
CLEANSTART-2026-XV44707 HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r...
Security vulnerability affects the rabbitmq-cluster-operator package. The HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream refunding data for any sent-but-unread portion of the stream, and again when a request handler reads the...
CLEANSTART-2026-XY43119 OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the rabbitmq-messaging-topology-operator package. OpenTelemetry-Go is the Go implementation of OpenTelemetry...
CLEANSTART-2026-CL45138 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the rabbitmq-messaging-topology-operator package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-HS63877 gRPC-Go is the Go language implementation of gRPC
Security vulnerability affects the rabbitmq-messaging-topology-operator package. gRPC-Go is the Go language implementation of gRPC...
CLEANSTART-2026-NJ93405 Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy
Security vulnerability affects the grafana package. Tempo queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy...
CLEANSTART-2026-TJ33106 vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace ...
Security vulnerability affects the grafana package. A vulnerability in Grafana Tempo exposes the S3 SSE-C encryption key in plaintext through the /status/config endpoint, potentially allowing unauthorized users to obtain the key used to encrypt trace data stored in S3...
CLEANSTART-2026-BX48253 Allocation of resources without limits or throttling (CWE-770) during Java object deserialization in Google Guava versions 4
Security vulnerability affects the sonarqube package. Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4...
CLEANSTART-2026-AW13216 opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API
Security vulnerability affects the sonarqube package. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API...
CLEANSTART-2023-LZ38620 tcpdump 4
Security vulnerability affects the tcpdump package. tcpdump 4...
CLEANSTART-2023-MC01914 ISO CLNS parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ISO CLNS parser in tcpdump before 4...
CLEANSTART-2023-FJ00607 ISO CLNS parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ISO CLNS parser in tcpdump before 4...
CLEANSTART-2023-BR29142 ATM parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ATM parser in tcpdump before 4...
CLEANSTART-2023-UP05430 SNMP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The SNMP parser in tcpdump before 4...
CLEANSTART-2023-JS37057 Q
Security vulnerability affects the tcpdump package. The Q...
CLEANSTART-2023-ZR78080 In tcpdump before 4
Security vulnerability affects the tcpdump package. In tcpdump before 4...
CLEANSTART-2023-PA17502 OTV parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The OTV parser in tcpdump before 4...
CLEANSTART-2023-OB67477 ISAKMP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ISAKMP parser in tcpdump before 4...
CLEANSTART-2023-BV68545 IPv6 parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The IPv6 parser in tcpdump before 4...
CLEANSTART-2023-PS35279 BOOTP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The BOOTP parser in tcpdump before 4...
CLEANSTART-2023-BM71645 ISO CLNS parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ISO CLNS parser in tcpdump before 4...
CLEANSTART-2023-TJ48587 Q
Security vulnerability affects the tcpdump package. The Q...
CLEANSTART-2023-JA27765 FRF
Security vulnerability affects the tcpdump package. The FRF...
CLEANSTART-2023-NB78016 bug in util-print
Security vulnerability affects the tcpdump package. A bug in util-print...
CLEANSTART-2023-OW45255 Classical IP over ATM parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The Classical IP over ATM parser in tcpdump before 4...
CLEANSTART-2023-TE94619 GeoNetworking parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The GeoNetworking parser in tcpdump before 4...
CLEANSTART-2023-LW75075 CALM FAST parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The CALM FAST parser in tcpdump before 4...
CLEANSTART-2023-TQ69805 TFTP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The TFTP parser in tcpdump before 4...
CLEANSTART-2023-JI33516 BOOTP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The BOOTP parser in tcpdump before 4...
CLEANSTART-2023-WJ88376 TCP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The TCP parser in tcpdump before 4...
CLEANSTART-2023-HP63084 IP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The IP parser in tcpdump before 4...
CLEANSTART-2023-EF06460 AppleTalk parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The AppleTalk parser in tcpdump before 4...
CLEANSTART-2023-ZK23715 STP parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The STP parser in tcpdump before 4...
CLEANSTART-2023-NJ46350 GRE parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The GRE parser in tcpdump before 4...
CLEANSTART-2023-QC40432 ZeroMQ parser in tcpdump before 4
Security vulnerability affects the tcpdump package. The ZeroMQ parser in tcpdump before 4...