Open Source Vulnerabilities

    Dashboard / Open Source Vulnerabilities

    CLEANSTART-2026-NK51453
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-DT28278
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-OS84422
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-VS35203
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-ZF40599
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-IE47244
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-NZ02778
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-RW36620
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-IU03491
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-JZ62126
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-DF83577
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-ZE30414
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-EE40225
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-ZN85412
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Pillow is a Python imaging library

    Published
    3 Nov 2026
    CLEANSTART-2026-XL53566
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-YX67220
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-YR32100
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-TA42176
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-JD01787
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-IT06812
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-TN77188
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-YF49105
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-WV85178
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-ZP19098
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-JH43303
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-YL55004
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-PT89967
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-WV77890
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-XW82868
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Flask-AppBuilder is an application development framework, built on top of the Flask web framework

    Published
    3 Nov 2026
    CLEANSTART-2026-GC08220
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Flask-AppBuilder is an application development framework, built on top of the Flask web framework

    Published
    3 Nov 2026
    CLEANSTART-2026-LP02945
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    aiohttp is an asynchronous HTTP client/server framework for asyncio and Python

    Published
    3 Nov 2026
    CLEANSTART-2026-QJ55505
    Fix available
    Packages

    apache-superset

    Summary

    Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain

    Published
    3 Nov 2026
    CLEANSTART-2026-VN36417
    Fix available
    Packages

    apache-superset

    Summary

    NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4

    Published
    3 Nov 2026
    CLEANSTART-2026-FE07697
    Fix available
    Packages

    apache-superset

    Summary

    This affects the package celery before 5

    Published
    3 Nov 2026
    CLEANSTART-2026-UB88543
    Fix available
    Packages

    apache-superset

    Summary

    Werkzeug is a comprehensive WSGI web application library

    Published
    3 Nov 2026
    CLEANSTART-2026-PK48356
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Jinja is an extensible templating engine

    Published
    3 Nov 2026
    CLEANSTART-2026-NH36624
    Fix available
    Packages

    apache-superset, apache-superset

    Summary

    Jinja is an extensible templating engine

    Published
    3 Nov 2026
    CLEANSTART-2026-KQ75263
    Fix available
    Packages

    apache-superset, apache-superset, apache-superset

    Summary

    Flask-AppBuilder is a development framework built on top of Flask

    Published
    3 Nov 2026
    CLEANSTART-2026-WE07714
    Fix available
    Packages

    grafana, rabbitmq-messaging-topology-operator, kyverno

    Summary

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

    Published
    3 Nov 2026
    CLEANSTART-2026-WP21635
    Fix available
    Packages

    grafana, rabbitmq-messaging-topology-operator, kyverno

    Summary

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

    Published
    3 Nov 2026
    CLEANSTART-2026-OI48555
    Fix available
    Packages

    vault, vault, grafana, rabbitmq-messaging-topology-operator, kyverno

    Summary

    Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web To...

    Published
    3 Nov 2026
    CLEANSTART-2026-GM17380
    Fix available
    Packages

    prometheus-mysqld-exporter, vault, vault, rabbitmq-messaging-topology-operator, rabbitmq-cluster-operator, haproxy-ingress, haproxy-ingress, kyverno

    Summary

    In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found

    Published
    3 Nov 2026
    CLEANSTART-2026-NY38871
    Fix available
    Packages

    prometheus-mysqld-exporter, vault, vault, rabbitmq-messaging-topology-operator, rabbitmq-cluster-operator, haproxy-ingress, haproxy-ingress, kyverno

    Summary

    When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation (n

    Published
    3 Nov 2026
    CLEANSTART-2026-KE54242
    Fix available
    Packages

    haproxy-ingress

    Summary

    On most platforms, Go uses the given system root certificates

    Published
    3 Nov 2026
    CLEANSTART-2026-BF43581
    Fix available
    Packages

    cert-manager

    Summary

    Security fix for GHSA-2v4p-qf9q-27wj applied in: cert-manager 1.20.5-r1

    Published
    3 Nov 2026
    CLEANSTART-2026-MB48143
    Fix available
    Packages

    rabbitmq-messaging-topology-operator, rabbitmq-messaging-topology-operator, cert-manager

    Summary

    gRPC-Go is the Go language implementation of gRPC

    Published
    3 Nov 2026
    CLEANSTART-2026-HB43127
    Fix available
    Packages

    apache-superset

    Summary

    Werkzeug is a comprehensive WSGI web application library

    Published
    3 Nov 2026
    CLEANSTART-2026-SA08494
    Fix available
    Packages

    apache-superset

    Summary

    Werkzeug is a comprehensive WSGI web application library

    Published
    3 Nov 2026
    CLEANSTART-2026-NQ44046
    Fix available
    Packages

    apache-superset

    Summary

    Werkzeug is a comprehensive WSGI web application library

    Published
    3 Nov 2026
    CLEANSTART-2026-AT25297
    Fix available
    Packages

    apache-superset

    Summary

    Werkzeug is a Web Server Gateway Interface web application library

    Published
    3 Nov 2026