CLEANSTART-2026-ET12387 Security fixes for CVE-2025-11579, CVE-2026-1229, CVE-2026-21726, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-33762, CVE-2026-34040, CVE-2026-34165, CVE-2026-34986, CVE-2026-39882, ghsa-3xc5-wrhm-f963, ghsa-497x-rrr9-68jp, ghsa-6g7g-w4f8-9c9x, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-fw7p-63qq-7hpr, ghsa-gm2x-2g9h-ccm8, ghsa-jhf3-xxhw-2wpp, ghsa-jqcq-xjh3-6g23, ghsa-p77j-4mvh-x3m3, ghsa-q9hv-hpm4-hj6x, ghsa-rwvp-r38j-9rgg, ghsa-w8rr-5gcm-pp58, ghsa-x6gf-mpr2-68h6, ghsa-xmrv-pmrh-hhx2 applied in versions: 1.12.1-r2, 1.14.2-r1, 1.14.2-r2, 1.14.2.r0

🗓️ 18 May 2026 14:00:36Reported by GoogleType

osv

osv🔗 osv.dev👁 21 Views

Security fixes for CVEs and GHSA advisories in grafana-alloy-fips.

Reporter	Title	Published	Views	Family All 8341
FreeBSD	traefik -- Multiple vulnerabilities	26 Mar 202600:00	–	freebsd
FreeBSD	www/gohugo -- CWE-79: XSS vulnerabilities	7 May 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality, denial of service and cross-site scripting	6 May 202613:02	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	28 Jun 202619:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM CloudPak for Data Scheduling Service is vulnerable to CVE-2026-24051.	28 May 202620:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a denial of service in go-git [CVE-2026-34165]	21 May 202615:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in google.golang.org/grpc-v1.62.0	28 Apr 202621:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	27 Apr 202613:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an authorization bypass in Moby [CVE-2026-34040]	27 Jul 202619:58	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	12 Jun 202611:10	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-ET12387.json
osv	www.osv.dev/vulnerability/CVE-2025-11579
osv	www.osv.dev/vulnerability/CVE-2026-1229
osv	www.osv.dev/vulnerability/CVE-2026-21726
osv	www.osv.dev/vulnerability/CVE-2026-24051
osv	www.osv.dev/vulnerability/CVE-2026-25679
osv	www.osv.dev/vulnerability/CVE-2026-27139
osv	www.osv.dev/vulnerability/CVE-2026-27142
osv	www.osv.dev/vulnerability/CVE-2026-33186
osv	www.osv.dev/vulnerability/CVE-2026-33762

21 May 2026 09:15Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.1 - 9.8

CVSS 46.3

EPSS0.1014

SSVC

grafana alloy fips security vulnerabilities security advisories versioned fixes