Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CLEANSTART-2026-CP20786 |
|
Vulnerability in nats-streaming (CLEANSTART-2026-CP20786)
vulnerability in nats-streaming (CLEANSTART-2026-CP20786). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.24.6-r1` or later.
|
| CLEANSTART-2026-ZL51442 |
|
Vulnerability in minio-operator (CLEANSTART-2026-ZL51442)
vulnerability in minio-operator (CLEANSTART-2026-ZL51442). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.1-r5` or later.
|
| CLEANSTART-2026-FT24360 |
|
Vulnerability in apache-superset (CLEANSTART-2026-FT24360)
vulnerability in apache-superset (CLEANSTART-2026-FT24360). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.0.0-r7` or later.
|
| CLEANSTART-2026-WO91797 |
|
Vulnerability in kube-state-metrics (CLEANSTART-2026-WO91797)
vulnerability in kube-state-metrics (CLEANSTART-2026-WO91797). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.16.0-r7` or later.
|
| CLEANSTART-2026-JE84467 |
|
Vulnerability in nats-streaming (CLEANSTART-2026-JE84467)
vulnerability in nats-streaming (CLEANSTART-2026-JE84467). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.25.6-r3` or later.
|
| CLEANSTART-2026-LJ67798 |
|
Vulnerability in kube-state-metrics (CLEANSTART-2026-LJ67798)
vulnerability in kube-state-metrics (CLEANSTART-2026-LJ67798). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.17.0-r3` or later.
|
| CLEANSTART-2026-IT61881 |
|
Vulnerability in kube-state-metrics (CLEANSTART-2026-IT61881)
vulnerability in kube-state-metrics (CLEANSTART-2026-IT61881). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.18.0-r5` or later.
|
| CLEANSTART-2026-UE70720 |
|
Vulnerability in mongodb (CLEANSTART-2026-UE70720)
vulnerability in mongodb (CLEANSTART-2026-UE70720). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.23-r2` or later.
|
| CLEANSTART-2026-PU64425 |
|
Vulnerability in mongodb (CLEANSTART-2026-PU64425)
vulnerability in mongodb (CLEANSTART-2026-PU64425). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.34-r2` or later.
|
| CLEANSTART-2026-VQ22894 |
|
Vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-VQ22894)
vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-VQ22894). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.25.0-r5` or later.
|
| CLEANSTART-2026-KG30406 |
|
Vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-KG30406)
vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-KG30406). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.26.8-r4` or later.
|
| CLEANSTART-2026-BL76821 |
|
Vulnerability in rancher-agent (CLEANSTART-2026-BL76821)
vulnerability in rancher-agent (CLEANSTART-2026-BL76821). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.13.1-r0` or later.
|
| CLEANSTART-2026-ZH27719 |
|
Vulnerability in prometheus-operator (CLEANSTART-2026-ZH27719)
vulnerability in prometheus-operator (CLEANSTART-2026-ZH27719). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.88.1-r0` or later.
|
| CLEANSTART-2026-WO73902 |
|
Vulnerability in prometheus (CLEANSTART-2026-WO73902)
vulnerability in prometheus (CLEANSTART-2026-WO73902). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.5.3-r2` or later.
|
| CLEANSTART-2026-GZ11549 |
|
Vulnerability in certificate-transparency-trillian-ctserver (CLEANSTART-2026-GZ11549)
vulnerability in certificate-transparency-trillian-ctserver (CLEANSTART-2026-GZ11549). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3.2-r2` or later.
|
| CLEANSTART-2026-DF67461 |
|
Vulnerability in prometheus (CLEANSTART-2026-DF67461)
vulnerability in prometheus (CLEANSTART-2026-DF67461). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.3-r2` or later.
|
| CLEANSTART-2026-ZT49542 |
|
Vulnerability in elastic-beats (CLEANSTART-2026-ZT49542)
vulnerability in elastic-beats (CLEANSTART-2026-ZT49542). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.19.14-r2` or later.
|
| CLEANSTART-2026-RF77222 |
|
Vulnerability in wave (CLEANSTART-2026-RF77222)
vulnerability in wave (CLEANSTART-2026-RF77222). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.13.1-r0` or later.
|
| CLEANSTART-2026-EU52554 |
|
Vulnerability in gostatsd (CLEANSTART-2026-EU52554)
vulnerability in gostatsd (CLEANSTART-2026-EU52554). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `28.3.0-r2` or later.
|
| CLEANSTART-2026-HN49173 |
|
Vulnerability in prometheus-operator (CLEANSTART-2026-HN49173)
vulnerability in prometheus-operator (CLEANSTART-2026-HN49173). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.90.1-r1` or later.
|
| CLEANSTART-2026-JN91167 |
|
Vulnerability in prometheus-operator (CLEANSTART-2026-JN91167)
vulnerability in prometheus-operator (CLEANSTART-2026-JN91167). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.89.0-r2` or later.
|
| CLEANSTART-2026-HM14899 |
|
Vulnerability in descheduler (CLEANSTART-2026-HM14899)
vulnerability in descheduler (CLEANSTART-2026-HM14899). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.34.0-r2` or later.
|
| CLEANSTART-2026-EX51963 |
|
Vulnerability in prometheus-operator (CLEANSTART-2026-EX51963)
vulnerability in prometheus-operator (CLEANSTART-2026-EX51963). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.91.0-r1` or later.
|
| CLEANSTART-2026-ZH72202 |
|
Vulnerability in kor (CLEANSTART-2026-ZH72202)
vulnerability in kor (CLEANSTART-2026-ZH72202). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.6.7-r0` or later.
|
| CLEANSTART-2026-LA96053 |
|
Vulnerability in wave (CLEANSTART-2026-LA96053)
vulnerability in wave (CLEANSTART-2026-LA96053). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.13.1-r0` or later.
|
| CLEANSTART-2026-EM89202 |
|
Vulnerability in cass-operator (CLEANSTART-2026-EM89202)
vulnerability in cass-operator (CLEANSTART-2026-EM89202). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.1-r2` or later.
|
| CLEANSTART-2026-LX00456 |
|
Vulnerability in dynamic-localpv-provisioner (CLEANSTART-2026-LX00456)
vulnerability in dynamic-localpv-provisioner (CLEANSTART-2026-LX00456). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.4.0-r3` or later.
|
| CLEANSTART-2026-EN66750 |
|
Vulnerability in apache-superset (CLEANSTART-2026-EN66750)
vulnerability in apache-superset (CLEANSTART-2026-EN66750). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.0-r5` or later.
|
| CLEANSTART-2026-VG07087 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-VG07087)
vulnerability in apache-zookeeper (CLEANSTART-2026-VG07087). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.7.2-r6` or later.
|
| CLEANSTART-2026-JR82778 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-JR82778)
vulnerability in apache-zookeeper (CLEANSTART-2026-JR82778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.5-r1` or later.
|
| CLEANSTART-2026-BD44609 |
|
Vulnerability in dcgm-exporter (CLEANSTART-2026-BD44609)
vulnerability in dcgm-exporter (CLEANSTART-2026-BD44609). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.5.1-r0` or later.
|
| MGASA-2026-0185 |
|
Vulnerability in minetest (MGASA-2026-0185)
vulnerability in minetest (MGASA-2026-0185). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.7.0-1.1.mga9` or later.
|
| MGASA-2026-0184 |
|
Vulnerability in wireshark (MGASA-2026-0184)
vulnerability in wireshark (MGASA-2026-0184). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.17-1.2.mga9` or later.
|
| MGASA-2026-0183 |
|
Vulnerability in freeciv (MGASA-2026-0183)
vulnerability in freeciv (MGASA-2026-0183). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.7-1.2.mga9` or later.
|
| CLEANSTART-2026-LB01734 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-LB01734)
vulnerability in apache-zookeeper (CLEANSTART-2026-LB01734). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.6-r1` or later.
|
| CLEANSTART-2026-XG53366 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-XG53366)
vulnerability in apache-zookeeper (CLEANSTART-2026-XG53366). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.4-r6` or later.
|
| CLEANSTART-2026-TL44561 |
|
Vulnerability in kubewatch (CLEANSTART-2026-TL44561)
vulnerability in kubewatch (CLEANSTART-2026-TL44561). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.12.0-r2` or later.
|
| CLEANSTART-2026-MY46883 |
|
Vulnerability in mockgen (CLEANSTART-2026-MY46883)
vulnerability in mockgen (CLEANSTART-2026-MY46883). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.6.0-r1` or later.
|
| CLEANSTART-2026-ZF65783 |
|
Vulnerability in apache-zookeeper (CLEANSTART-2026-ZF65783)
vulnerability in apache-zookeeper (CLEANSTART-2026-ZF65783). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.4-r4` or later.
|
| CVE-2026-53674 |
|
Vulnerability in dos (CVE-2026-53674)
vulnerability in dos (CVE-2026-53674). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-47838 |
|
Authentication Bypass in org.springframework.security:spring-security-web (CVE-2026-47838)
authentication bypass in org.springframework.security:spring-security-web (CVE-2026-47838). Confidential information can be exposed externally. Exploitable via ``SubjectDnX509PrincipalExtractor``.
|
| CVE-2026-53675 |
|
Vulnerability in buddypress/buddypress (CVE-2026-53675)
vulnerability in buddypress/buddypress (CVE-2026-53675). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-53673 |
|
Vulnerability in buddypress/buddypress (CVE-2026-53673)
vulnerability in buddypress/buddypress (CVE-2026-53673). Confidential information can be exposed externally. Mitigation: upgrade to `14.5.0` or later.
|
| CVE-2026-41732 |
|
Unsafe Deserialization in org.springframework.pulsar:spring-pulsar (CVE-2026-41732)
vulnerability in org.springframework.pulsar:spring-pulsar (CVE-2026-41732). Successful exploitation can lead to full system takeover.
|
| CVE-2026-41719 |
|
Vulnerability in org.springframework.data:spring-data-keyvalue (CVE-2026-41719)
vulnerability in org.springframework.data:spring-data-keyvalue (CVE-2026-41719). Confidential information can be exposed externally.
|
| CVE-2026-41837 |
|
Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41730 |
|
Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41730)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41730). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41727 |
|
Vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41727)
vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41727). Risk of unauthorized operations or information disclosure.
|
| CVE-2026-41729 |
|
Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41729)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41729). Confidential information can be exposed externally.
|
| CVE-2026-41726 |
|
Vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41726)
vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41726). Risk of unauthorized operations or information disclosure.
|