CLEANSTART-2026-XS62872 Security fix for CVE-2017-12159 applied in: keycloak 26.5.0-r0, keycloak 26.5.0-r2

CVE-2017-12159 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZX15129 Security fix for ghsa-cphf-4846-3xx9 applied in: incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, kogito-apps 10.1.0-r0, spark-sc213-jdk17-py311 4.1.1-r2, strimzi-kafka-operator 0.50.0-r0

ghsa-cphf-4846-3xx9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AL62330 Security fix for CVE-2025-11966 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.7-r5, keycloak 26.5.7-r4, kogito-apps 10.1.0-r0

CVE-2025-11966 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WF23391 Security fix for CVE-2025-11965 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.4.7-r5, keycloak 26.5.7-r4, kogito-apps 10.1.0-r0

CVE-2025-11965 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EK29154 Security fix for CVE-2026-1002 applied in: apicurio-registry 3.1.7-r6, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, kogito-apps 10.1.0-r0, spark-sc213-jdk17-py311 4.1.1-r2, strimzi-kafka-operator 0.46.1-r3, strimzi-kafka-operator 0.47.0-r2, strimzi-kafka-operator 0.48.0-r1, strimzi-kafka-operator 0.49.1-r0

CVE-2026-1002 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC26569 Security fix for CVE-2025-59250 applied in: apache-hive 4.0.1-r8, apache-hive 4.1.0-r5, apicurio-registry 3.1.7-r6, keycloak 26.3.5-r3, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.3-r3, sonarqube 25.12.0.117093-r2, sonarqube 26.3.0.120487-r3

CVE-2025-59250 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PA41665 Security fix for CVE-2025-66560 applied in: keycloak 26.3.5-r3, keycloak 26.5.7-r5, kogito-apps 10.1.0-r0

CVE-2025-66560 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EW06968 Security fix for CVE-2026-33871 applied in: apache-hive 4.0.0-r0, apache-hive 4.2.0-r1, apache-nifi 2.7.2-r2, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.2.0-r4, kafka-ui 1.3.0-r2, kafka-ui 1.4.2-r5, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kogito-apps 10.1.0-r1, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, sonarqube 25.12.0.117093-r3, sonarqube 26.4.0.121862-r2, stargate 1.0.91-r0, stargate 2.0.44-r6, stargate 2.0.48-r0, strimzi-kafka-operator 0.50.1-r1, strimzi-kafka-operator 0.51.0-r1, thingsboard 4.3.0.1-r2, thingsboard 4.3.1-r1, thingsboard 4.3.1.1-r0, trino 480-r3, wavefront-proxy 13.9-r1, wildfly 39.0.1-r0

CVE-2026-33871 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK60048 Security fix for ghsa-xxqh-mfjm-7mv9 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-xxqh-mfjm-7mv9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XR61334 Security fix for ghsa-wg6q-6289-32hp applied in: apache-nifi 2.9.0-r0, apache-nifi-registry 2.9.0-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r0, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, wildfly 39.0.1-r0

ghsa-wg6q-6289-32hp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KC30264 Security fix for ghsa-rwm7-x88c-3g2p applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, confluent-common-docker 7.6.9-r5, kafka-fips 3.8.1-r11, keycloak 26.4.11-r2, keycloak 26.5.7-r0, stargate 1.0.91-r2, stargate 2.0.48-r0

ghsa-rwm7-x88c-3g2p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QF31324 Security fix for ghsa-rc95-pcm8-65v9 applied in: keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1

ghsa-rc95-pcm8-65v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TK91249 Security fix for ghsa-p93r-85wp-75v3 applied in: elasticsearch 9.2.7-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, wildfly 39.0.1-r0

ghsa-p93r-85wp-75v3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HX67191 Security fix for ghsa-m4cv-j2px-7723 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-m4cv-j2px-7723 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OV40735 Security fix for ghsa-cm33-6792-r9fm applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-cm33-6792-r9fm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IB51181 Security fix for ghsa-98qh-xjc8-98pq applied in: keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1

ghsa-98qh-xjc8-98pq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FU44475 Security fix for ghsa-57rv-r2g8-2cj3 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.7-r0, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-57rv-r2g8-2cj3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AX30429 Security fix for ghsa-45q3-82m4-75jr applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-45q3-82m4-75jr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PE62023 Security fix for CVE-2026-42585 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42585 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ47528 Security fix for CVE-2026-42583 applied in: apache-hive 4.2.0-r3, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.8.0-r9, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, confluent-common-docker 7.6.9-r4, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-fips 3.8.1-r11, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, solr 9.8.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42583 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...