OSV - Open Source Vulnerabilities

MINI-349m-3m46-5m9f

MinimOS/delve-1.24

See record for full details

6 days ago

No fix available

MINI-3rf4-6vvr-rg3w

MinimOS/delve-fips-1.24

See record for full details

6 days ago

Fix available

MINI-4qm2-2wrv-hxwh

MinimOS/contour-1.31

See record for full details

6 days ago

Fix available

MINI-hr35-gc4h-9fh7

MinimOS/contour-1.32

See record for full details

6 days ago

Fix available

MINI-jvr2-pfxg-vmpp

MinimOS/docker-scout-1.20

See record for full details

6 days ago

No fix available

MINI-79j5-j6q5-x94f

MinimOS/distribution-registry-2.8

See record for full details

6 days ago

No fix available

ROOT-OS-DEBIAN-13-CVE-2026-27143

Root:Debian:13/rootio-golang-1.24

CVE-2026-27143 in rootio-golang-1.24 - Patched by Root

17 Jun

Fix available

CLEANSTART-2026-BM78291

CleanStart/dex

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

11 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-SQ76279

CleanStart/dex

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

11 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-XC13942

CleanStart/mountpoint-s3-csi-driver

Parsing arbitrary HTML can consume excessive CPU time, possibly leading to denial of service

11 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-VN16911

CleanStart/wave

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-GZ11549

CleanStart/certificate-transparency-trillian-ctserver

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-EU52554

CleanStart/gostatsd

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-RF77222

CleanStart/wave

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-LA96053

CleanStart/wave

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

10 Jun

Fix available
Severity - 9.8 (Critical)

MINI-xjqc-g6cv-2w2x

MinimOS/logto-1.39

See record for full details

09 Jun

Fix available