PT-2026-42351 · Cleanstart · Tempo

Publicado 2026-04-15 · Atualizado 2026-04-15

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Multiple security vulnerabilities affect the tempo package. Boolean XPath expressions that evaluate to true can cause an infinite loop in logicalQuery. See references for individual vulnerability details.

Correção

Identificadores relacionados

CLEANSTART-2026-WA84208

Produtos afetados

Tempo

Referências · 39

• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WA84208.json · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32281 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-6g7g-w4f8-9c9x · Nota
• https://osv.dev/vulnerability/CVE-2026-32280 · Nota
• https://osv.dev/vulnerability/CVE-2026-32282 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32283 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 · Nota
• https://osv.dev/vulnerability/CVE-2025-61726 · Nota
• https://osv.dev/vulnerability/CVE-2026-34986 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32280 · Nota de Segurança
• https://osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-32285 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2025-68119 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-61726 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-61729 · Nota de Segurança