CLEANSTART-2026-IA43044 Security fixes for CVE-2020-8908, CVE-2022-42889, CVE-2023-2976, CVE-2024-25710, CVE-2024-26308, CVE-2024-29371, CVE-2024-29857, CVE-2024-30171, CVE-2024-31573, CVE-2024-47554, CVE-2025-11143, CVE-2025-12383, CVE-2025-48734, CVE-2025-48924, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2025-8916, CVE-2026-1002, CVE-2026-1605, ghsa-72hv-8253-57qq applied in versions: 0.47.0-r2, 0.47.0-r3

🗓️ 01 Apr 2026 09:30:15Reported by GoogleType

osv🔗 osv.dev👁 8 Views

Security fixes for multiple vulnerabilities in strimzi kafka operator; resolved in later releases.

Reporter	Title	Published	Views	Family All 3083
0day.today	Apache Commons Text 1.9 Remote Code Execution Exploit	21 Jan 202400:00	–	zdt
vulnersOsv	ai.new-wave:spring-agent-app (>=0.1.0 <=0.3.0), ai.new-wave:spring-agent-core (>=0.1.0 <=0.3.0) +4576 more potentially affected by CVE-2025-58057 via io.netty:netty-codec-compression (>=4.2.0.Alpha3 <=4.2.4.Final)	3 Sep 202522:42	–	vulnersosv
vulnersOsv	cn.ponfee:commons-core (>=1.1 <=1.4), de.fraunhofer.iem:CryptoAnalysis (>=2.8.1 <=3.1.1) +19 more potentially affected by CVE-2024-29857 via org.bouncycastle:bctls-jdk18on (>=1.71 <=1.77)	14 May 202415:32	–	vulnersosv
vulnersOsv	org.apache.camel.karaf:camel-as2 (>=4.7.0 <=4.8.9), org.apache.camel.karaf:camel-as2-test (>=4.7.0 <=4.8.9) +6 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk18on (>=1.71 <=1.78)	13 Aug 202509:52	–	vulnersosv
vulnersOsv	ae.teletronics.nlp:w2vec (=1.0), ai.catboost:catboost-spark_2.11 (>=0.25-rc1 <=0.25-rc3) +11524 more potentially affected by CVE-2025-12383 via org.glassfish.jersey.core:jersey-client (>=2.0 <=2.45)	18 Nov 202518:32	–	vulnersosv
vulnersOsv	com.ascentstream.pulsar:bcfips-include-test (>=3.0.7.0-SNAPSHOT-a030c50 <=3.0.8.0-SNAPSHOT-16a7bcc), com.ascentstream.pulsar:bouncy-castle-bcfips (>=3.0.7.0-SNAPSHOT-a030c50 <=4.0.11.0) +13 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcpkix-fips (>=1.0.5 <=2.0.11)	13 Aug 202509:52	–	vulnersosv
vulnersOsv	com.github.mizosoft.methanol:benchmarks (>=1.1.0 <=1.2.0), com.github.mizosoft.methanol:methanol-testutils (>=1.1.0 <=1.2.0) +35 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcprov-debug-jdk15on (>=1.53 <=1.70)	13 Aug 202509:52	–	vulnersosv
vulnersOsv	ae.vigilancer.android-run-app:ae.vigilancer.android-run-app.gradle.plugin (>=1.0.1 <=1.0.2), aero.m-click:mcpdf (>=0.2.3 <=0.2.10) +21404 more potentially affected by CVE-2025-8916 via org.bouncycastle:bcpkix-jdk15on (>=1.47 <=1.70)	13 Aug 202512:31	–	vulnersosv
vulnersOsv	co.elastic.apm:apm-agent-attach-cli (>=1.26.0 <=1.49.0), com.adobe.documentservices:pdfservices-sdk (>=2.2.2 <=3.5.1) +143 more potentially affected by CVE-2024-29857 via org.bouncycastle:bc-fips (>=1.0.1 <=1.0.2.4)	14 May 202415:32	–	vulnersosv
vulnersOsv	africa.shuwari.sbt:sbt-js_2.12_1.0 (>=0.14.1 <=0.16.1), africa.shuwari.sbt:sbt-netbeans_2.12_1.0 (>=0.1.0 <=0.1.1) +21456 more potentially affected by CVE-2025-68161 via org.apache.logging.log4j:log4j-core (>=2.0-beta9 <=2.25.2)	18 Dec 202521:31	–	vulnersosv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IA43044.json
osv	www.osv.dev/vulnerability/CVE-2020-8908
osv	www.osv.dev/vulnerability/CVE-2022-42889
osv	www.osv.dev/vulnerability/CVE-2023-2976
osv	www.osv.dev/vulnerability/CVE-2024-25710
osv	www.osv.dev/vulnerability/CVE-2024-26308
osv	www.osv.dev/vulnerability/CVE-2024-29371
osv	www.osv.dev/vulnerability/CVE-2024-29857
osv	www.osv.dev/vulnerability/CVE-2024-30171
osv	www.osv.dev/vulnerability/CVE-2024-31573

01 Apr 2026 18:48Current

6.8Medium risk

Vulners AI Score6.8

CVSS 22.1

CVSS 3.18.8 - 9.8

CVSS 49.4

EPSS0.99931

SSVC