CLEANSTART-2026-VP67440 Security fixes in velero-fips 1.18.0-r1

🗓️ 30 Jul 2026 07:10:53Reported by GoogleType

osv🔗 osv.dev👁 10 Views

Velero-fips 1.18.0-r1 fixes five vulnerabilities.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container DesignerAuthoring operands are vulnerable to loss of confidentiality, denial of service and cross-site scripting	6 May 202613:02	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes June 2026	29 Jun 202610:18	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	7 Sep 202622:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to arbitrary code execution, loss of confidentiality and denial of service	6 May 202613:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	4 May 202607:40	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security QRadar Log Management AQL Plugin is vulnerable to using components with known vulnerabilities	13 Jul 202620:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)	22 Jul 202617:41	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been found in IBM Verify Identity Access OIDC Provider	21 May 202604:12	–	ibm
attackerkb	CVE-2026-33810	8 Apr 202601:06	–	attackerkb
attackerkb	CVE-2026-39883	8 Apr 202620:26	–	attackerkb

Source	Link
github	www.github.com/vmware-tanzu/velero

18 Sep 2026 12:17Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.2 - 8.8

CVSS 47.3

EPSS0.0034

SSVC

velero fips version 1.18.0-r1 five vulnerabilities cve-2026-32288 cve-2026-33810 cve-2026-39883 ghsa-78h2-9frx-2jm8 ghsa-xmrv-pmrh-hhx2