CLEANSTART-2026-OA04050

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OA04050.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-OA04050

Upstream

CVE-2026-34483

Published

2026-10-30T15:34:19Z

Modified

2026-10-31T01:02:27Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat

Details

Security vulnerability affects the thingsboard package. Improper Encoding or Escaping of Output vulnerability in the JsonAccessLogValve component of Apache Tomcat.

References

Affected packages

CleanStart / thingsboard

Package

Name: thingsboard
Purl: pkg:apk/cleanstart/thingsboard?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OA04050.json"

CleanStart / thingsboard

Package

Name: thingsboard
Purl: pkg:apk/cleanstart/thingsboard?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OA04050.json"