Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CLEANSTART-2026-CK64127
  • CleanStart/thingsboard
Security fixes for ghsa-6rw7-vpxm-498p, ghsa-73rr-hh4g-fpgx, ghsa-8qq5-rm4j-mr97, ghsa-wqch-xfxh-vrr4 applied in versions: 4.2.1.1-r1 4 days ago
  • Fix available
CLEANSTART-2026-DU32240
  • CleanStart/thingsboard-tb-web-ui
Security fixes for CVE-2026-2391, CVE-2026-26960, CVE-2026-29786, CVE-2026-31802, ghsa-34x7-hfp2-rc4v, ghsa-5359-pvf2-pw78, ghsa-73rr-hh4g-fpgx, ghsa-8qq5-rm4j-mr97, ghsa-r6q2-hw4h-h46w applied in versions: 4.2.1.1-r1, 4.2.1.1-r2, 4.3.0.1-r0, 4.3.1-r0 4 days ago
  • Fix available
CLEANSTART-2026-JK47870
  • CleanStart/thingsboard
Security fixes for CVE-2025-66614, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-24733, ghsa-6rw7-vpxm-498p, ghsa-73rr-hh4g-fpgx, ghsa-8qq5-rm4j-mr97, ghsa-wqch-xfxh-vrr4 applied in versions: 4.2.1.1-r1, 4.3.1-r0 4 days ago
  • Fix available
CLEANSTART-2026-DV49099
  • CleanStart/renovate
Security fixes for CVE-2025-64756, CVE-2025-69873, CVE-2026-1525, CVE-2026-1526, CVE-2026-1527, CVE-2026-1528, CVE-2026-2229, CVE-2026-2327, CVE-2026-23745, CVE-2026-2391, CVE-2026-24842, CVE-2026-25128, CVE-2026-25547, CVE-2026-2581, CVE-2026-25896, CVE-2026-26278, CVE-2026-26960, CVE-2026-27601, CVE-2026-27903, CVE-2026-27904, CVE-2026-27942, CVE-2026-28292, CVE-2026-29786, CVE-2026-31802, CVE-2026-32141, CVE-2026-33036, ghsa-23c5-xmqv-rm74, ghsa-25h7-pfq9-p65f, ghsa-2g4f-4pwh-qvx6, ghsa-2mjp-6q6p-2qxm, ghsa-34x7-hfp2-rc4v, ghsa-37qj-frw5-hhjh, ghsa-38c4-r59v-3vqw, ghsa-3ppc-4f35-3m26, ghsa-4992-7rv2-5pvq, ghsa-5j98-mcp5-4vw2, ghsa-73rr-hh4g-fpgx, ghsa-7h2j-956f-4vf2, ghsa-7r86-cg39-jmmj, ghsa-83g3-92jg-28cx, ghsa-8gc5-j5rx-235r, ghsa-8qq5-rm4j-mr97, ghsa-8wc6-vgrq-x6cf, ghsa-9ppj-qmqm-q256, ghsa-f269-vfmq-vjvj, ghsa-fj3w-jwp8-x2g3, ghsa-jmr7-xgp7-cmfj, ghsa-m7jm-9gc2-mpf2, ghsa-phc3-fgpg-7m6h, ghsa-qffp-2rhf-9h96, ghsa-qpx9-hpmf-5gmw, ghsa-r275-fr43-pm7q, ghsa-r6q2-hw4h-h46w, ghsa-v9p9-hfj2-hcw8, ghsa-vrm6-8vpv-qv8q, ghsa-w7fw-mjwx-w883 applied in versions: 43.4.4-r0 4 days ago
  • Fix available
MINI-pw98-q6c2-w97p
  • MinimOS/grafana-fips-12.1
See record for full details 04 Mar
  • No fix available
CLEANSTART-2026-SP64433
  • CleanStart/thingsboard
Security fixes for GHSA-6rw7-vpxm-498p, GHSA-73rr-hh4g-fpgx, GHSA-8qq5-rm4j-mr97 applied in versions: 4.2.1.1-r1 24 Feb
  • Fix available
MINI-4p83-vxvw-pcfh
  • MinimOS/verdaccio
See record for full details 22 Jan
  • No fix available
MINI-xpcr-3wjr-628g
  • MinimOS/grafana-12.1
  • MinimOS/grafana-12.1-oci-compat
See record for full details 22 Jan
  • No fix available
MINI-fcfp-f47m-6hff
  • MinimOS/npm
  • MinimOS/npm-doc
See record for full details 22 Jan
  • Fix available
CVE-2026-24001
  • github.com/kpdecker/jsdiff
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch 22 Jan
  • Fix available
  • Severity - 2.7 (Low)
MINI-f7q3-545q-ccx3
  • MinimOS/argo-workflow-cli-3.6
  • MinimOS/argo-workflow-controller-3.6
  • MinimOS/argo-workflow-controller-compat-3.6
  • MinimOS/argo-workflow-executor-3.6
  • MinimOS/argo-workflow-executor-compat-3.6
  • ... 3 more
See record for full details 21 Jan
  • Fix available
MINI-p7gm-rqq5-3ph6
  • MinimOS/argo-workflow-cli-fips-3.6
  • MinimOS/argo-workflow-controller-compat-fips-3.6
  • MinimOS/argo-workflow-controller-fips-3.6
  • MinimOS/argo-workflow-executor-compat-fips-3.6
  • MinimOS/argo-workflow-executor-fips-3.6
  • ... 2 more
See record for full details 21 Jan
  • Fix available
MINI-75c8-3m5j-gqr7
  • MinimOS/argo-workflow-cli-3.7
  • MinimOS/argo-workflow-controller-3.7
  • MinimOS/argo-workflow-controller-compat-3.7
  • MinimOS/argo-workflow-executor-3.7
  • MinimOS/argo-workflow-executor-compat-3.7
  • ... 3 more
See record for full details 21 Jan
  • Fix available
MINI-35jw-mgqx-9wrm
  • MinimOS/argo-workflow-cli-fips-3.7
  • MinimOS/argo-workflow-controller-compat-fips-3.7
  • MinimOS/argo-workflow-controller-fips-3.7
  • MinimOS/argo-workflow-executor-compat-fips-3.7
  • MinimOS/argo-workflow-executor-fips-3.7
  • ... 2 more
See record for full details 21 Jan
  • Fix available
GHSA-73rr-hh4g-fpgx
  • npm/diff
jsdiff has a Denial of Service vulnerability in parsePatch and applyPatch 14 Jan
  • Fix available
  • Severity - 2.7 (Low)