OSV - Open Source Vulnerabilities

CLEANSTART-2026-DO31246

CleanStart/terragrunt-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-KT28044

CleanStart/terragrunt-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-HQ88036

CleanStart/terragrunt-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-FR97108

CleanStart/terragrunt-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-CN84623

CleanStart/opentofu-fips

Within HostnameError

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-GY48351

CleanStart/opentofu-fips

Within HostnameError

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-MI12470

CleanStart/opentofu-fips

Within HostnameError

2 days ago

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-HQ78610

CleanStart/trino

Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java

25 Apr

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-BB70412

CleanStart/percona-xtradb-cluster-operator-fips

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

22 Apr

Fix available
Severity - 9.8 (Critical)

MINI-97xw-5r3w-gpcv

MinimOS/ingress-nginx-controller-1.13
MinimOS/ingress-nginx-controller-compat-1.13
MinimOS/ingress-nginx-custom-error-pages-1.13
MinimOS/ingress-nginx-custom-error-pages-compat-1.13
MinimOS/ingress-nginx-opentelemetry-plugin-1.13

See record for full details

19 Apr

No fix available

OESA-2026-1980

openEuler:20.03-LTS-SP4/golang

golang security update

17 Apr

Fix available

OESA-2026-1979

openEuler:24.03-LTS-SP2/golang

golang security update

17 Apr

Fix available

OESA-2026-1978

openEuler:24.03-LTS/golang

golang security update

17 Apr

Fix available

OESA-2026-1977

openEuler:22.03-LTS-SP4/golang

golang security update

17 Apr

Fix available

SUSE-SU-2026:21200-1

SUSE:Linux Enterprise Server 16.0/go1.25
SUSE:Linux Enterprise Server for SAP applications 16.0/go1.25

Security update for go1.25

16 Apr

Fix available

openSUSE-SU-2026:20496-1

openSUSE:Leap 16.0/go1.25

Security update for go1.25

16 Apr

Fix available