CLEANSTART-2026-KZ89146

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-KZ89146.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-KZ89146

Upstream

CVE-2026-29146

Published

2026-10-30T15:34:15Z

Modified

2026-10-31T06:15:19Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration

Details

Security vulnerability affects the thingsboard package. Padding Oracle vulnerability in Apache Tomcat's EncryptInterceptor with default configuration.

References

Affected packages

CleanStart / thingsboard

Package

Name: thingsboard
Purl: pkg:apk/cleanstart/thingsboard?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-KZ89146.json"

CleanStart / thingsboard

Package

Name: thingsboard
Purl: pkg:apk/cleanstart/thingsboard?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-KZ89146.json"