CLEANSTART-2026-IC09970 Security fixes for CVE-2025-22868, CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-39821, CVE-2026-39824, CVE-2026-39883, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, ghsa-6v2p-p543-phr9 applied in versions: 0.14.9-r1, 0.14.9-r2, 0.14.9-r3, 0.15.2-r0, 0.15.2-r1, 0.16.1-r1

🗓️ 21 Jul 2026 08:58:09Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 18 Views

Security fixes for multiple CVEs in metallb, applied in versions 0.14.9-r1 through 0.16.1-r1.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cloud installation tool (cloudkit) are now fixed in 5.2.3.8 or higher and 6.0.1.1 or higher	10 Aug 202622:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 24.0.0-IF005 and 24.0.1-IF002.	2 May 202507:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-61729]	14 Apr 202616:58	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities which can affect IBM Storage Scale cloudkit and CES S3 are now addressed. (CVE-2025-22868, CVE-2025-22869)	9 May 202520:44	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Automation Decision Services for October 2025 - Multiple CVEs addressed	3 Dec 202506:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container operator and operands are vulnerable to loss of confidentiality and denial of service due to multiple CVEs	15 Oct 202608:52	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in DataStage on Cloud Pak for Data	25 Feb 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities that can affect IBM Fusion HCI and IBM Fusion HCI for watsonx	31 May 202514:07	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IC09970.json
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-47912
osv	www.osv.dev/vulnerability/CVE-2025-58183
osv	www.osv.dev/vulnerability/CVE-2025-58185
osv	www.osv.dev/vulnerability/CVE-2025-58186
osv	www.osv.dev/vulnerability/CVE-2025-58187
osv	www.osv.dev/vulnerability/CVE-2025-58188
osv	www.osv.dev/vulnerability/CVE-2025-58189
osv	www.osv.dev/vulnerability/CVE-2025-61723

18 Sep 2026 12:17Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.17 - 9.6

CVSS 47.3

EPSS0.01625

SSVC

metallb security fixes vulnerable versions affected releases