Vulnerability Database - OSV

CLEANSTART-2026-QK13571

CleanStart/airflow-2
CleanStart/airflow-3

Security fix for ghsa-mgf9-4vpg-hj56 applied in: airflow-2 2.10.3-r3, airflow-2 2.11.2-r4, airflow-3 3.1.8-r4, airflow-3 3.2.1-r4 yesterday

Fix available

CVE-2026-49855

github.com/tornadoweb/tornado

tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) 14 Jul

Fix available
Severity - 7.5 (High)

PYSEC-2026-3389

PyPI/tornado

tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb) 13 Jul

Fix available
Severity - 7.5 (High)

ECHO-7775-eb27-2601

Echo:PyPI/tornado

See record for full details 01 Jul

Fix available

MINI-jhcw-fxwg-6qqw

MinimOS/litellm-1.83

See record for full details 21 Jun

Fix available

MINI-hf67-x9c8-783j

MinimOS/litellm-1.82

See record for full details 21 Jun

Fix available

MINI-5wfw-h46w-v3p9

MinimOS/litellm-1.81

See record for full details 21 Jun

Fix available

MINI-w3m5-7r3p-7qwh

MinimOS/litellm-1.80

See record for full details 21 Jun

Fix available

MINI-f5f3-v65f-hrgv

MinimOS/airflow-3

See record for full details 18 Jun

Fix available

MINI-9wg5-hpcf-rcpx

MinimOS/airflow-2

See record for full details 16 Jun

No fix available

MINI-frcv-qj4f-j8cv

MinimOS/litellm-1.86

See record for full details 16 Jun

Fix available

MINI-m32x-92cm-ppw7

MinimOS/litellm-1.85

See record for full details 16 Jun

Fix available

MINI-r34c-8x5q-w558

MinimOS/litellm-1.84

See record for full details 16 Jun

Fix available

CGA-9p7x-vm7g-7xvh

Chainguard/mitmproxy
Wolfi/mitmproxy

See record for full details 16 Jun

Fix available
Severity - 7.5 (High)

CGA-gppg-r36g-g6xv

Chainguard/airflow-2

See record for full details 16 Jun

No fix available
Severity - 7.5 (High)

CGA-r9j7-96f3-2874

Chainguard/airflow-2

See record for full details 16 Jun

No fix available
Severity - 7.5 (High)