CLEANSTART-2026-BK22414 Security fixes for CVE-2026-25541, ghsa-434x-w66g-qw3r, ghsa-cq8v-f236-94qc applied in versions: 40.0.0-r0

🗓️ 21 Jul 2026 11:13:04Reported by GoogleType

osv🔗 osv.dev👁 3 Views

Security fixes for wasmtime vulnerabilities including CVE 2026 25541, applied to version forty point zero point zero minus zero.

Reporter	Title	Published	Views	Family All 82
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway vulnerable to Denial of Service due to use of Bytes (CVE-2026-25541)	8 Apr 202616:06	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in bytes bundled with IBM Fusion, IBM Fusion HCI, and IBM Fusion Content-Aware Storage	13 Jul 202619:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses bytes-1.10.0.crate which is vulnerable to CVE-2026-25541.	30 Mar 202607:01	–	ibm
ATTACKERKB	CVE-2026-25541	4 Feb 202622:03	–	attackerkb
CBLMariner	CVE-2026-25541 affecting package kata-containers for versions less than 3.19.1.kata2-5	27 Feb 202604:00	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package netavark for versions less than 1.10.3-7	6 Apr 202623:43	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package azl-compliance for versions less than 1.0.2-3	9 Mar 202614:32	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rpm-ostree for versions less than 2024.4-8	7 Apr 202600:40	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rust for versions less than 1.75.0-27	6 Apr 202623:43	–	cbl_mariner
CBLMariner	CVE-2026-25541 affecting package rust for versions less than 1.90.0-6	6 Apr 202623:43	–	cbl_mariner

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-BK22414.json
osv	www.osv.dev/vulnerability/CVE-2026-25541
osv	www.osv.dev/vulnerability/ghsa-434x-w66g-qw3r
osv	www.osv.dev/vulnerability/ghsa-cq8v-f236-94qc
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-25541

22 Jul 2026 01:00Current

5.2Medium risk

Vulners AI Score5.2

CVSS 3.17.5

CVSS 46.9

EPSS0.00552

SSVC