CLEANSTART-2026-IA43044 Security fixes for CVE-2020-8908, CVE-2022-42889, CVE-2023-2976, CVE-2024-25710, CVE-2024-26308, CVE-2024-29371, CVE-2024-29857, CVE-2024-30171, CVE-2024-31573, CVE-2024-47554, CVE-2025-11143, CVE-2025-12383, CVE-2025-48734, CVE-2025-48924, CVE-2025-58057, CVE-2025-67735, CVE-2025-68161, CVE-2025-8916, CVE-2026-1002, CVE-2026-1605, ghsa-72hv-8253-57qq applied in versions: 0.47.0-r2, 0.47.0-r3

🗓️ 01 Apr 2026 09:30:15Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 26 Views

Security fixes for multiple vulnerabilities in strimzi kafka operator; resolved in later releases.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multipe vulnerabilities in DITA may affect IBM Business Automation Workflow Case Management docGenerator feature (CVE-2023-2976, CVE-2022-44729, CVE-2022-44730)	12 Dec 202309:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for June 2023	30 Jun 202315:51	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Protect Server is affected by a vulnerability in the Eclipse Jersey-client library that could cause critical SSL/TLS security configurations issues (CVE-2025-12383).	31 Jul 202620:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Security QRadar EDR Software	11 Feb 202616:52	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in Apache Commons IO affects IBM watsonx Assistant for IBM Cloud Pak for Data	5 Feb 202520:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Operational Decision Manager for December 2025 - Multiple CVEs addressed	29 Jan 202607:37	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in Apache Commons IO affects IBM Business Automation Workflow - CVE-2024-47554	7 Feb 202516:25	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for February 2025.	13 Mar 202616:55	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a sensitive information exposure in Google Guava [CVE-2023-2976]	29 Sep 202320:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM SPSS Modeler is affected by multiple vulnerabilities in DataView	2 Jul 202616:17	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IA43044.json
osv	www.osv.dev/vulnerability/CVE-2020-8908
osv	www.osv.dev/vulnerability/CVE-2022-42889
osv	www.osv.dev/vulnerability/CVE-2023-2976
osv	www.osv.dev/vulnerability/CVE-2024-25710
osv	www.osv.dev/vulnerability/CVE-2024-26308
osv	www.osv.dev/vulnerability/CVE-2024-29371
osv	www.osv.dev/vulnerability/CVE-2024-29857
osv	www.osv.dev/vulnerability/CVE-2024-30171
osv	www.osv.dev/vulnerability/CVE-2024-31573

18 Sep 2026 12:17Current

7High risk

Vulners AI Score7

CVSS 22.1

CVSS 3.18.1 - 9.8

CVSS 49.4

EPSS0.99931

SSVC

strimzi kafka operator vulnerability ids security fixes later releases