https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-15T22:21:43.840459+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cleanstart-2026-fq08949 CLEANSTART-2026-FQ08949 — Security fix for GHSA-558v-64gr-wgg4 applied in: elasticsearch 9.4.4-r1 2026-11-15T22:21:43.844489+00:00

Affected: CleanStart: elasticsearch

Security vulnerability affects the elasticsearch package. This issue is resolved in later releases. See references for vulnerability details.

 https://db.gcve.eu/vuln/cve-2026-59901 CVE-2026-59901 — Netty Bzip2Decoder: Infinite Loop in RLE State Machine Leads to Event-Loop Thread Hang 2026-11-15T22:21:43.844563+00:00

Affected: netty

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the `Bzip2Decoder` handler in Netty's compression codec pipeline is vulnerable to a denial-of-service attack through a malformed bzip2 stream that permanently captures the event-loop thread in an infinite loop. The vulnerability exists in the run-length encoding (RLE) state machine within [`Bzip2BlockDecompressor.read()`]. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.