Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
π GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
Cleanstart is not individually searchable yet β the search will cover the sources available on the search page.
| ID | Description | Published | Updated |
|---|---|---|---|
| cleanstart-2026-rx13164 | malicious HTTP/2 peer can cause excessive CPU consumption in the client or server by opening a large number of streams and then sending many small SETTINGS frames containing SETTINGS_INITIAL_WINDOW... | 2026-10-11T00:36:47.416474Z | 2026-10-10T22:11:59Z |
| cleanstart-2026-iv56904 | Historically, we have been rather lax about malformed framing-related headers in our HTTP/2 implementation, as they cannot interfere with HTTP/2 framing | 2026-10-11T00:36:47.351190Z | 2026-10-10T22:11:59Z |
| cleanstart-2026-gi35870 | HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently | 2026-10-11T00:36:47.664414Z | 2026-10-10T22:11:59Z |
| cleanstart-2026-fi20100 | When "Trailer" headers are sent by a client, the HTTP server internally uses the header values to populate the Request | 2026-10-11T00:36:47.279969Z | 2026-10-10T22:11:59Z |
| cleanstart-2026-en61439 | HTTP/2 server can refund connection-level flow control twice for the same data: Once when a client resets a stream (refunding data for any sent-but-unread portion of the stream), and again when a r... | 2026-10-11T00:36:47.008898Z | 2026-10-10T22:11:59Z |
| cleanstart-2026-xx38333 | Prometheus is an open-source monitoring system and time series database | 2026-10-10T00:36:46.457454Z | 2026-10-09T11:37:49Z |
| cleanstart-2026-tz27062 | Prometheus is an open-source monitoring system and time series database | 2026-10-10T00:36:46.663909Z | 2026-10-09T11:37:49Z |
| cleanstart-2026-kl35365 | Prometheus is an open-source monitoring system and time series database | 2026-10-10T00:36:46.213092Z | 2026-10-09T11:37:49Z |
| cleanstart-2026-iy45098 | Security fix for ghsa-hrxh-6v49-42gf applied in: loki 3.6.11-r0 | 2026-10-10T00:36:47.734018Z | 2026-10-09T11:37:49Z |
| cleanstart-2026-fb95411 | Prometheus is an open-source monitoring system and time series database | 2026-10-10T00:36:46.835179Z | 2026-10-09T11:37:49Z |
| cleanstart-2026-yj89488 | RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes | 2026-10-10T00:39:48.179554Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-vt81725 | RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes | 2026-10-10T00:39:47.668129Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-qx36211 | JLine is a Java library for handling console input | 2026-10-10T00:39:47.405409Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-pk52336 | yawkat LZ4 Java provides LZ4 compression for Java | 2026-10-10T00:39:48.074963Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-mv69619 | RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes | 2026-10-10T00:39:47.732056Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-lm18724 | yawkat LZ4 Java provides LZ4 compression for Java | 2026-10-10T00:39:47.941967Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-ir34711 | JLine is a Java library for handling console input | 2026-10-10T00:39:47.535601Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-ia44862 | yawkat LZ4 Java provides LZ4 compression for Java | 2026-10-10T00:39:47.604395Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-ea15585 | yawkat LZ4 Java provides LZ4 compression for Java | 2026-10-10T00:39:47.874308Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-du73207 | RabbitMQ Java client library allows Java and JVM-based applications to connect to and interact with RabbitMQ nodes | 2026-10-10T00:39:47.802275Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-cx61220 | yawkat LZ4 Java provides LZ4 compression for Java | 2026-10-10T00:39:48.007968Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-ad70544 | JLine is a Java library for handling console input | 2026-10-10T00:39:47.471833Z | 2026-10-09T11:35:44Z |
| cleanstart-2026-zk87180 | application using spring-security-saml2-service-provider and the REDIRECT binding for SAML 2 | 2026-10-10T00:36:50.510795Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-ze47134 | In Eclipse Jetty, for HTTP/1, HTTP/2 and HTTP/3 requests, there is no strict check that the request authority (host and port) matches what provided in the Host header (if present) | 2026-10-10T00:36:49.649323Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-yb42445 | Applications using Spring Data Commons may be vulnerable to a Denial of Service (DoS) attack leading to a StackOverflowException when parsing Sort parameters | 2026-10-10T00:36:50.971484Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-xw11767 | In Eclipse Jetty, the Digest authentication server-side component uses ISO-8859-1 to encode the password as bytes | 2026-10-10T00:36:49.786311Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-xl17660 | HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header va... | 2026-10-10T00:36:52.870048Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-xk50947 | Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly | 2026-10-10T00:36:50.242382Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-wx93243 | vulnerability in Spring Expression Language (SpEL) evaluation logic allows for arbitrary zero-argument method invocation, even within restricted or read-only contexts, which may allow an attacker t... | 2026-10-10T00:36:51.425659Z | 2026-10-09T11:33:46Z |
| cleanstart-2026-vv78172 | Apache NiFi 1 | 2026-10-10T00:36:50.177987Z | 2026-10-09T11:33:46Z |