CLEANSTART-2026-CK01312 Security fix for GHSA-gcjf-9mgh-3p7g applied in: hazelcast 5.7.0-r1, logstash-fips 9.4.3-r1, strimzi-kafka-operator 1.1.0-r2

GHSA-gcjf-9mgh-3p7g affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZA82538 Security fix for GHSA-xx22-p4ch-683r applied in: cassandra 5.0.8-r1, hazelcast 5.7.0-r1, logstash-fips 9.4.3-r1

GHSA-xx22-p4ch-683r affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WG67624 Security fix for GHSA-3244-j874-rhc2 applied in: apache-hive 4.2.0-r5, hazelcast 5.7.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

GHSA-3244-j874-rhc2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OY65007 Security fix for GHSA-9vcr-p3rj-q5q6 applied in: cosign 3.1.2-r1, spire-server-fips 1.15.1-r1

GHSA-9vcr-p3rj-q5q6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BV44413 Security fix for CVE-2026-46604 applied in: mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, ollama 0.31.2-r2, ollama 0.32.11-r3, ollama-fips 0.30.11-r1, ollama-fips 0.32.11-r2, ollama-fips 0.32.9-r1

CVE-2026-46604 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GI85197 Security fix for CVE-2026-10532 applied in: apache-nifi 2.10.0-r1, apache-nifi-registry 2.9.0-r3, cassandra 5.0.8-r1, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r1, cassandra-reaper-fips 4.1.1-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r4, trino 483-r1

CVE-2026-10532 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AE18231 Security fix for GHSA-p47f-322f-whfh applied in: cassandra 5.0.8-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 483-r1

GHSA-p47f-322f-whfh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YY39100 Security fix for GHSA-jhq6-gfmj-v8fx applied in: cassandra 5.0.8-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 483-r1

GHSA-jhq6-gfmj-v8fx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZA65601 Security fix for GHSA-xf85-363p-868w applied in: argo-cd 3.4.5-r1, cert-manager-cmctl-fips 2.5.0-r1

GHSA-xf85-363p-868w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OB69984 Security fix for CVE-2024-38816 applied in: activemq 5.19.8-r3

Security vulnerability affects the activemq package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UK19001 Security fix for CVE-2026-59881 applied in: airflow-3 3.0.6-r3, airflow-3 3.1.8-r7, airflow-3 3.2.1-r8, airflow-3 3.2.2-r3, airflow-3 3.3.0-r2, kserve-storage-controller 0.19.0-r0

CVE-2026-59881 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PK89488 Security fix for CVE-2026-21441 applied in: kserve-storage-controller 0.19.0-r0

Security vulnerability affects the kserve-storage-controller package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-RO11754 Security fix for CVE-2026-69198 applied in: langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r1, langfuse-worker 3.223.0-r2, langfuse-worker 3.224.0-r1, langfuse-worker 3.224.1-r1, langfuse-worker 3.224.2-r1, langfuse-worker 3.224.4-r1, langfuse-worker 3.225.0-r1, langfuse-worker 4.0.0-r1, langfuse-worker 4.3.0-r1, langfuse-worker 4.3.1-r1, n8n 2.28.0-r2, npm 11.17.0-r2, npm 11.18.0-r2, proxy-agent 6.4.0-r0, proxy-agent 6.5.0-r1, proxy-agent 7.0.0-r2, proxy-agent 8.0.2-r1, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-69198 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CK63271 Security fix for CVE-2026-59639 applied in: akhq 0.27.1-r5, apache-hive 4.0.1-r10, apache-hive 4.1.0-r6, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r3, elasticsearch 9.3.8-r1, elasticsearch 9.4.4-r4, keycloak 26.3.5-r6, keycloak 26.5.7-r7, keycloak 26.6.4-r3, keycloak 26.7.1-r0, wildfly 37.0.1-r3, wildfly 38.0.1-r4

CVE-2026-59639 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MX09474 Security fix for CVE-2026-12185 applied in: apache-hive 4.0.1-r10, apache-hive 4.1.0-r6, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r3, elasticsearch 9.3.8-r1, elasticsearch 9.4.4-r4, keycloak 26.3.5-r6, keycloak 26.4.13-r1, keycloak 26.5.7-r7, keycloak 26.6.4-r3, keycloak 26.7.1-r0, wildfly 37.0.1-r3, wildfly 38.0.1-r4

CVE-2026-12185 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AC66923 Security fix for CVE-2026-8763 applied in: akhq 0.27.1-r5, apache-hive 4.0.1-r10, apache-hive 4.1.0-r6, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r3, elasticsearch 9.3.8-r1, elasticsearch 9.4.4-r4, keycloak 26.3.5-r6, keycloak 26.4.13-r2, keycloak 26.5.7-r7, keycloak 26.7.1-r0, wildfly 37.0.1-r3, wildfly 38.0.1-r4

CVE-2026-8763 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NT08858 Security fix for CVE-2026-59642 applied in: apache-hive 4.0.1-r10, apache-hive 4.1.0-r6, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r3, elasticsearch 9.3.8-r1, elasticsearch 9.4.4-r4, keycloak 26.3.5-r6, keycloak 26.5.7-r7, keycloak 26.6.4-r3, keycloak 26.7.1-r0, wildfly 37.0.1-r3, wildfly 38.0.1-r4

CVE-2026-59642 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FU52429 Security fix for CVE-2026-59647 applied in: akhq 0.27.1-r5, apache-hive 4.0.1-r10, apache-hive 4.1.0-r6, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r3, elasticsearch 9.3.8-r1, elasticsearch 9.4.4-r4, keycloak 26.3.5-r6, keycloak 26.5.7-r7, keycloak 26.6.4-r3, keycloak 26.7.1-r0, wildfly 37.0.1-r3, wildfly 38.0.1-r4

CVE-2026-59647 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QY67277 Security fix for CVE-2026-15157 applied in: langfuse 3.208.0-r1, langfuse 3.213.0-r1, langfuse 3.225.0-r1, langfuse 4.2.0-r1, langfuse-worker 3.194.1-r1, langfuse-worker 3.212.0-r1, langfuse-worker 3.213.0-r1, langfuse-worker 3.214.0-r1, langfuse-worker 3.215.0-r1, langfuse-worker 3.216.0-r1, langfuse-worker 3.217.0-r1, langfuse-worker 3.218.0-r1, langfuse-worker 3.219.0-r1, langfuse-worker 3.220.0-r1, langfuse-worker 3.221.1-r1, langfuse-worker 3.223.0-r2, langfuse-worker 3.224.0-r1, langfuse-worker 3.224.1-r1, langfuse-worker 3.224.2-r1, langfuse-worker 3.224.4-r1, langfuse-worker 3.225.0-r1, langfuse-worker 4.0.0-r1, langfuse-worker 4.3.0-r1, langfuse-worker 4.3.1-r1, n8n 2.28.0-r2, npm 11.17.0-r2, npm 11.18.0-r2, npm 11.18.0-r3, renovate 44.31.0-r2, renovate 44.32.4-r1, renovate 44.32.5-r1, renovate 44.32.6-r1

CVE-2026-15157 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OU11904 Security fix for CVE-2026-68494 applied in: elasticsearch 9.4.4-r4, wso2is 7.0.0-r1, wso2is 7.1.0-r1

CVE-2026-68494 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...