CLEANSTART-2026-II62972

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-II62972.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-II62972
Upstream
Published
2026-10-27T00:37:40Z
Modified
2026-10-27T00:45:06Z
Severity
  • 7.4 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable
Details

Security vulnerability affects the trino package. In Eclipse Jetty, the class JASPIAuthenticator initiates the authentication checks, which set two ThreadLocal variable.

References

Affected packages

CleanStart / trino

Package

Name
trino
Purl
pkg:apk/cleanstart/trino

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
484-r1

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-II62972.json"