CLEANSTART-2026-MA24172 Security fixes for CVE-2026-2303, CVE-2026-27145, CVE-2026-33816, CVE-2026-34986, CVE-2026-39821, CVE-2026-39822, CVE-2026-39824, CVE-2026-39883, CVE-2026-41602, CVE-2026-42504, CVE-2026-42505, CVE-2026-42507, CVE-2026-46595, CVE-2026-48496, ghsa-6g7g-w4f8-9c9x, ghsa-mpwr-8vm7-h73f, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 0.144.0-r3, 0.144.0-r4, 0.150.0-r0, 0.150.0-r1, 0.152.0-r0

🗓️ 21 Jul 2026 07:56:04Reported by GoogleType

osv_cleanstart🔗 osv.dev👁 15 Views

Security fixes for multiple CVEs in opentelemetry-collector-contrib across several versions.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities addressed in IBM SevOne Network Performance Management for September 2026	19 Oct 202616:40	–	ibm
IBM Security Bulletins	Security Bulletin: Maximo AI Service uses multiple third party dependencies which are vulnerable to multiple CVEs.	1 Oct 202615:38	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Protection is affected by multiple vulnerabilities	21 Oct 202613:34	–	ibm
IBM Security Bulletins	Security Bulletin: Impacted IBM Optim for z/OS 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in jackc/Pgx, cloudflare/cfSSL, x/net	28 Sep 202606:49	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Cluster Export Services (CES) S3 are now addressed in 5.2.3.9 or higher and 6.0.1.0 or higher	24 Jul 202615:52	–	ibm
IBM Security Bulletins	Security Bulletin: Impacted IBM Optim 1.0.0, 1.1.0 and 1.2.0 by vulnerabilities in jackc/pgx	21 Sep 202617:14	–	ibm
IBM Security Bulletins	Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software	24 Sep 202614:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DataPower Gateway affected by multiple CVEs in Apache Thrift	28 Sep 202614:48	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	8 Sep 202615:26	–	ibm
IBM Security Bulletins	Security Bulletin:Vulnerability in crypto affects IBM Netezza Appliance	12 Aug 202609:27	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MA24172.json
osv	www.osv.dev/vulnerability/CVE-2026-2303
osv	www.osv.dev/vulnerability/CVE-2026-27145
osv	www.osv.dev/vulnerability/CVE-2026-33816
osv	www.osv.dev/vulnerability/CVE-2026-34986
osv	www.osv.dev/vulnerability/CVE-2026-39821
osv	www.osv.dev/vulnerability/CVE-2026-39822
osv	www.osv.dev/vulnerability/CVE-2026-39824
osv	www.osv.dev/vulnerability/CVE-2026-39883
osv	www.osv.dev/vulnerability/CVE-2026-41602

18 Sep 2026 12:16Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.17 - 10

CVSS 47.3

EPSS0.01163

SSVC

opentelemetry collector contrib security vulnerabilities versions 0.144.0-r3 versions 0.144.0-r4 versions 0.150.0-r0 versions 0.150.0-r1 versions 0.152.0-r0