CLEANSTART-2026-SA70432 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-537c-gmf6-5ccf, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.4.0-r0, 2.4.0-r1

🗓️ 21 Jul 2026 10:44:02Reported by GoogleType

osv🔗 osv.dev👁 14 Views

Multiple security vulnerabilities affect the k8s sidecar package; fixed in later releases.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Vulnerability pyopenssl, jackson-core, pyasn, log4j-core, handlebars, twisted, bcpkix-jdk18on, Mako, httpd, apache2-build, wheel, click, moment-timezone-with-data, urllib, pip July 2026	27 Jul 202616:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a security restrictions bypass in Psf Requests [CVE-2024-35195]	27 Feb 202515:00	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar EDR Software contains multiple vulnerabilities	8 Jul 202409:49	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in idna-3.13-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45409)	26 Jun 202608:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition	17 Dec 202509:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT uses multiple third party dependencies which is vulnerable to CVEs.	7 Apr 202519:17	–	ibm
IBM Security Bulletins	Security Bulletin: AIX/VIOS is affected by multiple vulnerabilities due to Python	19 Nov 202515:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM watsonx Orchestrate Developer Edition affected by vulnerability in python3-pip-wheel python3.11-pip python3.11-pip-wheel requests	29 Oct 202510:51	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in MongoDB, Python, Node.js, Golang Go, Linux kernel affect IBM Spectrum Protect Plus	10 Mar 202620:52	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SA70432.json
osv	www.osv.dev/vulnerability/CVE-2024-35195
osv	www.osv.dev/vulnerability/CVE-2024-47081
osv	www.osv.dev/vulnerability/CVE-2025-8869
osv	www.osv.dev/vulnerability/CVE-2026-1703
osv	www.osv.dev/vulnerability/CVE-2026-25645
osv	www.osv.dev/vulnerability/CVE-2026-3219
osv	www.osv.dev/vulnerability/CVE-2026-44431
osv	www.osv.dev/vulnerability/CVE-2026-44432
osv	www.osv.dev/vulnerability/CVE-2026-45409

18 Sep 2026 12:17Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.15.6 - 8

CVSS 48.9

EPSS0.0098

SSVC