Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

ID Title
CLEANSTART-2026-CP20786 Vulnerability in nats-streaming (CLEANSTART-2026-CP20786)
vulnerability in nats-streaming (CLEANSTART-2026-CP20786). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.24.6-r1` or later.
CLEANSTART-2026-ZL51442 Vulnerability in minio-operator (CLEANSTART-2026-ZL51442)
vulnerability in minio-operator (CLEANSTART-2026-ZL51442). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.1.1-r5` or later.
CLEANSTART-2026-FT24360 Vulnerability in apache-superset (CLEANSTART-2026-FT24360)
vulnerability in apache-superset (CLEANSTART-2026-FT24360). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `5.0.0-r7` or later.
CLEANSTART-2026-WO91797 Vulnerability in kube-state-metrics (CLEANSTART-2026-WO91797)
vulnerability in kube-state-metrics (CLEANSTART-2026-WO91797). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.16.0-r7` or later.
CLEANSTART-2026-JE84467 Vulnerability in nats-streaming (CLEANSTART-2026-JE84467)
vulnerability in nats-streaming (CLEANSTART-2026-JE84467). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.25.6-r3` or later.
CLEANSTART-2026-LJ67798 Vulnerability in kube-state-metrics (CLEANSTART-2026-LJ67798)
vulnerability in kube-state-metrics (CLEANSTART-2026-LJ67798). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.17.0-r3` or later.
CLEANSTART-2026-IT61881 Vulnerability in kube-state-metrics (CLEANSTART-2026-IT61881)
vulnerability in kube-state-metrics (CLEANSTART-2026-IT61881). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.18.0-r5` or later.
CLEANSTART-2026-UE70720 Vulnerability in mongodb (CLEANSTART-2026-UE70720)
vulnerability in mongodb (CLEANSTART-2026-UE70720). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.0.23-r2` or later.
CLEANSTART-2026-PU64425 Vulnerability in mongodb (CLEANSTART-2026-PU64425)
vulnerability in mongodb (CLEANSTART-2026-PU64425). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `7.0.34-r2` or later.
CLEANSTART-2026-VQ22894 Vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-VQ22894)
vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-VQ22894). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.25.0-r5` or later.
CLEANSTART-2026-KG30406 Vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-KG30406)
vulnerability in kubernetes-dns-node-cache (CLEANSTART-2026-KG30406). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.26.8-r4` or later.
CLEANSTART-2026-BL76821 Vulnerability in rancher-agent (CLEANSTART-2026-BL76821)
vulnerability in rancher-agent (CLEANSTART-2026-BL76821). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.13.1-r0` or later.
CLEANSTART-2026-ZH27719 Vulnerability in prometheus-operator (CLEANSTART-2026-ZH27719)
vulnerability in prometheus-operator (CLEANSTART-2026-ZH27719). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.88.1-r0` or later.
CLEANSTART-2026-WO73902 Vulnerability in prometheus (CLEANSTART-2026-WO73902)
vulnerability in prometheus (CLEANSTART-2026-WO73902). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.5.3-r2` or later.
CLEANSTART-2026-GZ11549 Vulnerability in certificate-transparency-trillian-ctserver (CLEANSTART-2026-GZ11549)
vulnerability in certificate-transparency-trillian-ctserver (CLEANSTART-2026-GZ11549). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.3.2-r2` or later.
CLEANSTART-2026-DF67461 Vulnerability in prometheus (CLEANSTART-2026-DF67461)
vulnerability in prometheus (CLEANSTART-2026-DF67461). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.11.3-r2` or later.
CLEANSTART-2026-ZT49542 Vulnerability in elastic-beats (CLEANSTART-2026-ZT49542)
vulnerability in elastic-beats (CLEANSTART-2026-ZT49542). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `8.19.14-r2` or later.
CLEANSTART-2026-RF77222 Vulnerability in wave (CLEANSTART-2026-RF77222)
vulnerability in wave (CLEANSTART-2026-RF77222). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.13.1-r0` or later.
CLEANSTART-2026-EU52554 Vulnerability in gostatsd (CLEANSTART-2026-EU52554)
vulnerability in gostatsd (CLEANSTART-2026-EU52554). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `28.3.0-r2` or later.
CLEANSTART-2026-HN49173 Vulnerability in prometheus-operator (CLEANSTART-2026-HN49173)
vulnerability in prometheus-operator (CLEANSTART-2026-HN49173). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.90.1-r1` or later.
CLEANSTART-2026-JN91167 Vulnerability in prometheus-operator (CLEANSTART-2026-JN91167)
vulnerability in prometheus-operator (CLEANSTART-2026-JN91167). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.89.0-r2` or later.
CLEANSTART-2026-HM14899 Vulnerability in descheduler (CLEANSTART-2026-HM14899)
vulnerability in descheduler (CLEANSTART-2026-HM14899). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.34.0-r2` or later.
CLEANSTART-2026-EX51963 Vulnerability in prometheus-operator (CLEANSTART-2026-EX51963)
vulnerability in prometheus-operator (CLEANSTART-2026-EX51963). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.91.0-r1` or later.
CLEANSTART-2026-ZH72202 Vulnerability in kor (CLEANSTART-2026-ZH72202)
vulnerability in kor (CLEANSTART-2026-ZH72202). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.6.7-r0` or later.
CLEANSTART-2026-LA96053 Vulnerability in wave (CLEANSTART-2026-LA96053)
vulnerability in wave (CLEANSTART-2026-LA96053). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.13.1-r0` or later.
CLEANSTART-2026-EM89202 Vulnerability in cass-operator (CLEANSTART-2026-EM89202)
vulnerability in cass-operator (CLEANSTART-2026-EM89202). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `1.28.1-r2` or later.
CLEANSTART-2026-LX00456 Vulnerability in dynamic-localpv-provisioner (CLEANSTART-2026-LX00456)
vulnerability in dynamic-localpv-provisioner (CLEANSTART-2026-LX00456). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.4.0-r3` or later.
CLEANSTART-2026-EN66750 Vulnerability in apache-superset (CLEANSTART-2026-EN66750)
vulnerability in apache-superset (CLEANSTART-2026-EN66750). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `6.0.0-r5` or later.
CLEANSTART-2026-VG07087 Vulnerability in apache-zookeeper (CLEANSTART-2026-VG07087)
vulnerability in apache-zookeeper (CLEANSTART-2026-VG07087). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.7.2-r6` or later.
CLEANSTART-2026-JR82778 Vulnerability in apache-zookeeper (CLEANSTART-2026-JR82778)
vulnerability in apache-zookeeper (CLEANSTART-2026-JR82778). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.9.5-r1` or later.
CLEANSTART-2026-BD44609 Vulnerability in dcgm-exporter (CLEANSTART-2026-BD44609)
vulnerability in dcgm-exporter (CLEANSTART-2026-BD44609). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `4.5.1-r0` or later.
MGASA-2026-0185 Vulnerability in minetest (MGASA-2026-0185)
vulnerability in minetest (MGASA-2026-0185). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `5.7.0-1.1.mga9` or later.
MGASA-2026-0184 Vulnerability in wireshark (MGASA-2026-0184)
vulnerability in wireshark (MGASA-2026-0184). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `4.0.17-1.2.mga9` or later.
MGASA-2026-0183 Vulnerability in freeciv (MGASA-2026-0183)
vulnerability in freeciv (MGASA-2026-0183). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.0.7-1.2.mga9` or later.
CLEANSTART-2026-LB01734 Vulnerability in apache-zookeeper (CLEANSTART-2026-LB01734)
vulnerability in apache-zookeeper (CLEANSTART-2026-LB01734). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `3.8.6-r1` or later.
CLEANSTART-2026-XG53366 Vulnerability in apache-zookeeper (CLEANSTART-2026-XG53366)
vulnerability in apache-zookeeper (CLEANSTART-2026-XG53366). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.9.4-r6` or later.
CLEANSTART-2026-TL44561 Vulnerability in kubewatch (CLEANSTART-2026-TL44561)
vulnerability in kubewatch (CLEANSTART-2026-TL44561). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `2.12.0-r2` or later.
CLEANSTART-2026-MY46883 Vulnerability in mockgen (CLEANSTART-2026-MY46883)
vulnerability in mockgen (CLEANSTART-2026-MY46883). Successful exploitation can lead to full system takeover. Mitigation: upgrade to `0.6.0-r1` or later.
CLEANSTART-2026-ZF65783 Vulnerability in apache-zookeeper (CLEANSTART-2026-ZF65783)
vulnerability in apache-zookeeper (CLEANSTART-2026-ZF65783). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `3.6.4-r4` or later.
CVE-2026-53674 Vulnerability in dos (CVE-2026-53674)
vulnerability in dos (CVE-2026-53674). Risk of unauthorized operations or information disclosure.
CVE-2026-47838 Authentication Bypass in org.springframework.security:spring-security-web (CVE-2026-47838)
authentication bypass in org.springframework.security:spring-security-web (CVE-2026-47838). Confidential information can be exposed externally. Exploitable via ``SubjectDnX509PrincipalExtractor``.
CVE-2026-53675 Vulnerability in buddypress/buddypress (CVE-2026-53675)
vulnerability in buddypress/buddypress (CVE-2026-53675). Risk of unauthorized operations or information disclosure.
CVE-2026-53673 Vulnerability in buddypress/buddypress (CVE-2026-53673)
vulnerability in buddypress/buddypress (CVE-2026-53673). Confidential information can be exposed externally. Mitigation: upgrade to `14.5.0` or later.
CVE-2026-41732 Unsafe Deserialization in org.springframework.pulsar:spring-pulsar (CVE-2026-41732)
vulnerability in org.springframework.pulsar:spring-pulsar (CVE-2026-41732). Successful exploitation can lead to full system takeover.
CVE-2026-41719 Vulnerability in org.springframework.data:spring-data-keyvalue (CVE-2026-41719)
vulnerability in org.springframework.data:spring-data-keyvalue (CVE-2026-41719). Confidential information can be exposed externally.
CVE-2026-41837 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41837). Risk of unauthorized operations or information disclosure.
CVE-2026-41730 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41730)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41730). Risk of unauthorized operations or information disclosure.
CVE-2026-41727 Vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41727)
vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41727). Risk of unauthorized operations or information disclosure.
CVE-2026-41729 Vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41729)
vulnerability in org.springframework.data:spring-data-rest-core (CVE-2026-41729). Confidential information can be exposed externally.
CVE-2026-41726 Vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41726)
vulnerability in org.springframework.kafka:spring-kafka (CVE-2026-41726). Risk of unauthorized operations or information disclosure.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →