CLEANSTART-2026-YV60334

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YV60334.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-YV60334
Upstream
Published
2026-10-27T00:37:41Z
Modified
2026-10-27T00:45:10Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs
Details

Security vulnerability affects the trino package. The Jetty URI parser has some key differences to other common parsers when evaluating invalid or unusual URIs.

References

Affected packages

CleanStart / trino

Package

Name
trino
Purl
pkg:apk/cleanstart/trino

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
484-r1

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YV60334.json"