CLEANSTART-2026-KT42152 Security fixes for CVE-2026-12143, CVE-2026-44979, CVE-2026-45249, CVE-2026-46625, CVE-2026-53550, CVE-2026-53655, ghsa-cmwh-pvxp-8882 applied in versions: 3.6.0-r4

🗓️ 21 Jul 2026 08:18:17Reported by GoogleType

osv🔗 osv.dev👁 8 Views

OpenSearch Dashboards FIPS fixes for multiple vulnerabilities in 3.6.0-r4; patches in later versions.

Reporter	Title	Published	Views	Family All 1801
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	21 Aug 202617:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	30 Jun 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security SOAR is using a component with a known vulnerability (CVE-2026-12143)	24 Jul 202616:33	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in js-yaml affects IBM Netezza Appliance	12 Aug 202608:59	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	3 Aug 202611:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Aspera Faspex	20 Jul 202615:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - Monitor Component uses js-yaml-4.1.1.tgz which is vulnerable to multiple CVEs.	27 Aug 202619:42	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in js-yaml affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	25 Aug 202618:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is affected by multiple vulnerabilities found in JavaScript	13 Jul 202608:36	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KT42152.json
osv	www.osv.dev/vulnerability/CVE-2026-12143
osv	www.osv.dev/vulnerability/CVE-2026-44979
osv	www.osv.dev/vulnerability/CVE-2026-45249
osv	www.osv.dev/vulnerability/CVE-2026-46625
osv	www.osv.dev/vulnerability/CVE-2026-53550
osv	www.osv.dev/vulnerability/CVE-2026-53655
osv	www.osv.dev/vulnerability/ghsa-cmwh-pvxp-8882
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-12143
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-44979

22 Jul 2026 01:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.5 - 7.5

CVSS 48.7

EPSS0.00919

SSVC