CLEANSTART-2026-GM63718 Security fixes for CVE-2025-15558, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-25679, CVE-2026-25934, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-q9hv-hpm4-hj6x applied in versions: 1.39.0-r0, 1.39.0-r1, 1.39.0-r2, 1.39.0-r3

🗓️ 01 Apr 2026 09:19:09Reported by GoogleType

osv🔗 osv.dev👁 13 Views

Security fixes for multiple CVEs in the syft library across versions 1.39.0-r0 through 1.39.0-r3.

Reporter	Title	Published	Views	Family All 9720
FreeBSD	traefik -- Multiple vulnerabilities	26 Mar 202600:00	–	freebsd
FreeBSD	oauth2-proxy -- multiple vulnerabilities	5 Feb 202600:00	–	freebsd
FreeBSD	www/gohugo -- CWE-79: XSS vulnerabilities	7 May 202600:00	–	freebsd
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container is vulnerable to loss of confidentiality (CVE-2025-68121)	31 Mar 202615:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality, denial of service and cross-site scripting	6 May 202613:02	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	7 Apr 202607:08	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and IntegrationRuntime & IntegrationServer operands are vulnerable to loss of confidentiality (CVE-2026-27137) and denial of service (CVE-2026-27138)	1 May 202616:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in google.golang.org/grpc-v1.62.0	28 Apr 202621:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Planning Analytics Cartridge has addressed a security vulnerability in Docker CLI (CVE-2025-15558)	13 Apr 202618:45	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GM63718.json
osv	www.osv.dev/vulnerability/CVE-2025-15558
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68121
osv	www.osv.dev/vulnerability/CVE-2026-25679
osv	www.osv.dev/vulnerability/CVE-2026-25934
osv	www.osv.dev/vulnerability/CVE-2026-27137
osv	www.osv.dev/vulnerability/CVE-2026-27138

01 Apr 2026 18:48Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.1 - 10

CVSS 47

EPSS0.01945

SSVC