CLEANSTART-2026-SO50412 Security fixes for CVE-2025-32962, CVE-2025-58065, CVE-2026-22815, CVE-2026-25645, CVE-2026-26007, CVE-2026-27205, CVE-2026-27459, CVE-2026-30922, CVE-2026-31958, CVE-2026-32597, CVE-2026-33936, CVE-2026-34513, CVE-2026-34514, CVE-2026-34515, CVE-2026-34516, CVE-2026-34517, CVE-2026-34518, CVE-2026-34519, CVE-2026-34520, CVE-2026-34525, CVE-2026-35536, CVE-2026-39892, CVE-2026-41066, CVE-2026-41205, CVE-2026-41425, CVE-2026-42561, CVE-2026-44307, CVE-2026-44431, CVE-2026-44432, CVE-2026-44503, CVE-2026-44681, CVE-2026-45309, CVE-2026-4539, CVE-2026-45409, CVE-2026-48522, CVE-2026-48523, CVE-2026-48524, CVE-2026-48525, CVE-2026-48526, CVE-2026-8838, ghsa-78cv-mqj4-43f7, ghsa-7j59-v9qr-6fq9 applied in versions: 2.11.0-r2, 2.11.2-r1, 2.11.2-r2, 2.11.2-r3

🗓️ 09 Jul 2026 09:50:49Reported by GoogleType

osv🔗 osv.dev👁 2 Views

Security fixes for the airflow-2 package addressing multiple CVEs; available in later releases.

Reporter	Title	Published	Views	Family All 2955
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Data System (CPDS 1.0) is affected by a Denial of Service vulnerability due to pyasn1	8 Jul 202611:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Data Collector uses cryptography-44.0.1-cp39-abi3-manylinux_2_34_x86_64.whl which is vulnerable to CVE-2026-26007.	16 Apr 202607:34	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in idna-3.13-py3-none-any.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-45409)	26 Jun 202608:02	–	ibm
IBM Security Bulletins	Security Bulletin: cryptography Missing Subgroup Validation in EC Public Keys Enables ECDH Key Leakage and ECDSA Forgery	4 May 202612:20	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in cryptography-46.0.3-cp311-abi3-manylinux_2_34_x86_64.whl used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2026-26007)	6 Apr 202610:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Maximo Application Suite - IoT Component uses multiple third party dependencies which is vulnerable to multiple CVEs.	1 Apr 202607:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Process Mining 2.2.0	30 Jun 202616:13	–	ibm
IBM Security Bulletins	Security Bulletin:Requests SSL Verification Issue Fixed in 2.32.0	4 May 202612:45	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	22 Jun 202614:27	–	ibm
IBM Security Bulletins	Security Bulletin:Flask Vary Cookie Header Vulnerability: Use of Cache Containing Sensitive Information Fixed in 3.1.3	4 May 202612:50	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-SO50412.json
osv	www.osv.dev/vulnerability/CVE-2025-32962
osv	www.osv.dev/vulnerability/CVE-2025-58065
osv	www.osv.dev/vulnerability/CVE-2026-22815
osv	www.osv.dev/vulnerability/CVE-2026-25645
osv	www.osv.dev/vulnerability/CVE-2026-26007
osv	www.osv.dev/vulnerability/CVE-2026-27205
osv	www.osv.dev/vulnerability/CVE-2026-27459
osv	www.osv.dev/vulnerability/CVE-2026-30922
osv	www.osv.dev/vulnerability/CVE-2026-31958

10 Jul 2026 00:45Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.19.8

CVSS 49.3

CVSS 21.7

CVSS 33.3

EPSS0.00808

SSVC