OSV - Open Source Vulnerabilities

MINI-hxg3-63vm-hc55

MinimOS/bitwarden-sm-operator-1

See record for full details

15 hours ago

No fix available

MINI-j9fg-crmc-p4hj

MinimOS/delve-fips-1.24

See record for full details

17 hours ago

No fix available

MINI-m29f-jff9-g9mp

MinimOS/delve-1.24

See record for full details

18 hours ago

Fix available

MINI-2275-5mg2-wc2j

MinimOS/docker-scout-1.20

See record for full details

22 hours ago

No fix available

MINI-2g36-6v4g-j63j

MinimOS/contour-1.32

See record for full details

yesterday

No fix available

MINI-7vjg-fgwq-x96c

MinimOS/contour-1.31

See record for full details

yesterday

No fix available

MINI-4v7f-4r7m-ccjh

MinimOS/distribution-registry-2.8

See record for full details

4 days ago

Fix available

CLEANSTART-2026-BM78291

CleanStart/dex

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

11 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-SQ76279

CleanStart/dex

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

11 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-CP20786

CleanStart/nats-streaming

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-GZ11549

CleanStart/certificate-transparency-trillian-ctserver

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-EU52554

CleanStart/gostatsd

In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-RF77222

CleanStart/wave

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

10 Jun

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-LA96053

CleanStart/wave

ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label

10 Jun

Fix available
Severity - 9.8 (Critical)

RHSA-2026:23264

Red Hat:hummingbird:1/golang1.26
Red Hat:hummingbird:1/golang1.26-docs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

09 Jun

Fix available
Severity - 8.2 (High)

RHSA-2026:23262

Red Hat:hummingbird:1/golang1.25
Red Hat:hummingbird:1/golang1.25-docs

Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

09 Jun

Fix available
Severity - 8.2 (High)