Vulnerability Database

CLEANSTART-2026-AF49322

CleanStart/airflow-2
CleanStart/airflow-3
CleanStart/apache-superset
CleanStart/jupyterhub-k8s-hub
CleanStart/py3-jupyterhub

Security fix for ghsa-2h4p-vjrc-8xpq applied in: airflow-2 2.10.3-r2, airflow-2 2.11.0-r3, airflow-3 3.1.8-r3, apache-superset 5.0.0-r7, jupyterhub-k8s-hub 4.3.5-r0, py3-jupyterhub 5.4.6-r0 18 Sep

Fix available

CGA-p79c-7j76-25q7

Chainguard/mlflow
Wolfi/mlflow

See record for full details 15 Sep

Fix available
Severity - 8.7 (High)

PYSEC-2026-2617

PyPI/mako

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup 13 Jul

Fix available
Severity - 8.7 (High)

MINI-7xgp-g26j-67f7

MinimOS/apache-superset-6.1

See record for full details 02 Jul

Fix available

MINI-r66m-pxwv-x735

MinimOS/apache-superset-6.0

See record for full details 02 Jul

Fix available

MINI-g9vx-w466-5c2j

MinimOS/apache-superset-4.1

See record for full details 02 Jul

Fix available

ECHO-15a8-1150-dd0d

Echo:PyPI/mako

See record for full details 26 May

Fix available

MINI-c9gg-4hxq-r6wc

MinimOS/airflow-3
MinimOS/airflow-3-advanced-compat
MinimOS/airflow-3-compat

See record for full details 13 May

Fix available

CVE-2026-44307

github.com/sqlalchemy/mako

Mako: Path traversal via backslash URI on Windows in TemplateLookup 12 May

Fix available
Severity - 8.7 (High)

CGA-hgx7-c692-2hfw

Chainguard/pgadmin4-fips