CLEANSTART-2026-QM33219 Security fix for GHSA-37ch-88jc-xwx2 applied in: sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

GHSA-37ch-88jc-xwx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QC14914 Security fix for CVE-2026-4867 applied in: argo-workflows 3.6.19-r7, argo-workflows 3.7.15-r3, sqlpad 7.5.7-r1, thingsboard-tb-web-ui 4.3.1-r0

CVE-2026-4867 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK60048 Security fix for GHSA-xxqh-mfjm-7mv9 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-xxqh-mfjm-7mv9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LT22679 Security fix for CVE-2026-42586 applied in: apache-hive 4.2.0-r3, hazelcast 5.7.0-r1, management-api-for-apache-cassandra-5.0 0.1.118-r2, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3

CVE-2026-42586 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MU35489 Security fix for CVE-2026-43513 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-43513 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BN96016 Security fix for CVE-2026-42498 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-42498 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MV28193 Security fix for CVE-2026-41284 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-41284 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SE01248 Security fix for CVE-2026-43515 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-43515 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NC17468 Security fix for CVE-2026-41293 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, tomcat10 10.0.27-r1

CVE-2026-41293 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OD91042 Security fix for CVE-2026-43512 applied in: cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, cloud-config-server 5.0.2-r3, cloud-config-server 5.0.4-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-43512 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DT32496 Security fix for GHSA-76c9-3jph-rj3q applied in: thingsboard-tb-web-ui 4.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XD15428 Security fix for CVE-2026-45673 applied in: apache-hive 4.2.0-r5, apache-nifi 2.9.0-r1, elasticsearch 9.3.5-r2, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-45673 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WP83796 Security fix for GHSA-cc37-9q2j-3hfv applied in: apache-hive 4.2.0-r5, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, keycloak 26.4.2-r0, keycloak 26.4.7-r4, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.3-r2, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

GHSA-cc37-9q2j-3hfv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BD80531 Security fix for CVE-2026-48059 applied in: hazelcast 5.7.0-r1, keycloak 26.3.5-r3, keycloak 26.4.2-r0, keycloak 26.4.7-r4, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.3-r2, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-48059 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HH77101 Security fix for GHSA-h2qv-fj59-j46j applied in: keycloak 26.4.2-r0, keycloak 26.4.7-r4, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.3-r2, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

GHSA-h2qv-fj59-j46j affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IX07149 Security fix for CVE-2026-46340 applied in: apache-hive 4.2.0-r5, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3

CVE-2026-46340 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SF24909 Security fix for CVE-2025-22227 applied in: elasticsearch 9.3.5-r0, thingsboard 4.0.2-r0, thingsboard 4.1-r0

CVE-2025-22227 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RN17986 Security fix for GHSA-vg35-5wq7-3x7w applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-BN31244 Security fix for GHSA-q8mj-m7cp-5q26 applied in: sqlpad 7.5.7-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, thingsboard-tb-web-ui 4.3.1.1-r1

GHSA-q8mj-m7cp-5q26 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AV82595 Security fix for GHSA-v98h-vmpc-fpqv applied in: thingsboard-tb-web-ui 4.3.1.1-r1

Security vulnerability affects the thingsboard-tb-web-ui package. This issue is resolved in later releases. See references for vulnerability details...