CLEANSTART-2026-UO85049 Security fixes for CVE-2026-27205, CVE-2026-28684, CVE-2026-41205, CVE-2026-44307, CVE-2026-44431, CVE-2026-44432, CVE-2026-4539, CVE-2026-45409, CVE-2026-48522, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, ghsa-2h4p-vjrc-8xpq, ghsa-5239-wwwm-4pmq, ghsa-65pc-fj4g-8rjx, ghsa-68rp-wp8r-4726, ghsa-mf9v-mfxr-j63j, ghsa-mf9w-mj56-hr94, ghsa-qccp-gfcp-xxvc, ghsa-v92g-xgxw-vvmm applied in versions: 5.0.0-r7

🗓️ 09 Jul 2026 09:43:31Reported by GoogleType

Security fixes for multiple CVEs in apache-superset, resolved in later releases, applied in 5.0.0-r7.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in idna-3.13-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45409)	26 Jun 202608:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	1 Apr 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	28 Sep 202613:49	–	ibm
IBM Security Bulletins	Security Bulletin:Flask Vary Cookie Header Vulnerability: Use of Cache Containing Sensitive Information Fixed in 3.1.3	4 May 202612:50	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in watsonx.data	15 Sep 202610:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite uses flask-3.1.2-py3-none-any.whl which is vulnerable to CVE-2026-27205.	6 Apr 202618:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses multiple dependencies which are vulnerable to multiple CVEs.	30 Jul 202615:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a Use of Cache Containing Sensitive Information in Flask [CVE-2026-27205]	18 Jun 202618:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	12 Aug 202613:52	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-UO85049.json
osv	www.osv.dev/vulnerability/CVE-2026-27205
osv	www.osv.dev/vulnerability/CVE-2026-28684
osv	www.osv.dev/vulnerability/CVE-2026-41205
osv	www.osv.dev/vulnerability/CVE-2026-44307
osv	www.osv.dev/vulnerability/CVE-2026-44431
osv	www.osv.dev/vulnerability/CVE-2026-44432
osv	www.osv.dev/vulnerability/CVE-2026-4539
osv	www.osv.dev/vulnerability/CVE-2026-45409
osv	www.osv.dev/vulnerability/CVE-2026-48522

09 Sep 2026 12:00Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.17.4 - 7.5

CVSS 48.9

CVSS 21.7

CVSS 33.3

EPSS0.00891

SSVC