CLEANSTART-2026-EP14815 Security fix for ghsa-crv5-9vww-q3g8 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-crv5-9vww-q3g8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NG55070 Security fix for CVE-2026-41650 applied in: jitsucom-jitsu 2.14.0-r1, mongosh 2.6.0-r4, mongosh 2.8.2-r3

CVE-2026-41650 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK60048 Security fix for ghsa-xxqh-mfjm-7mv9 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-xxqh-mfjm-7mv9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WS59650 Security fix for ghsa-pmwg-cvhr-8vh7 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-pmwg-cvhr-8vh7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XR61334 Security fix for ghsa-wg6q-6289-32hp applied in: apache-nifi 2.9.0-r0, apache-nifi-registry 2.9.0-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r0, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, wildfly 39.0.1-r0

ghsa-wg6q-6289-32hp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CK33786 Security fix for ghsa-gh4j-gqv2-49f6 applied in: mongosh 2.6.0-r4, mongosh 2.8.2-r3, opensearch-dashboards-fips 3.5.0-r1

ghsa-gh4j-gqv2-49f6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FR80106 Security fix for ghsa-p6xx-57qc-3wxr applied in: opensearch-dashboards-fips 2.19.5-r0

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KY86069 Security fix for ghsa-v8h7-rr48-vmmv applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-v8h7-rr48-vmmv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KC30264 Security fix for ghsa-rwm7-x88c-3g2p applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, confluent-common-docker 7.6.9-r5, kafka-fips 3.8.1-r11, keycloak 26.4.11-r2, keycloak 26.5.7-r0, stargate 1.0.91-r2, stargate 2.0.48-r0

ghsa-rwm7-x88c-3g2p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BV20490 Security fix for ghsa-q5qw-h33p-qvwr applied in: opensearch-dashboards-fips 2.19.5-r0

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QF31324 Security fix for ghsa-rc95-pcm8-65v9 applied in: keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1

ghsa-rc95-pcm8-65v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW47152 Security fix for ghsa-w9j2-pvgh-6h63 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-w9j2-pvgh-6h63 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TK91249 Security fix for ghsa-p93r-85wp-75v3 applied in: elasticsearch 9.2.7-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, wildfly 39.0.1-r0

ghsa-p93r-85wp-75v3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HW56011 Security fix for ghsa-mj4r-2hfc-f8p6 applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cassandra 5.0.8-r1, cassandra-fips 5.0.6-r2, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, confluent-common-docker 7.6.9-r4, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-fips 3.8.1-r11, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-mj4r-2hfc-f8p6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HX67191 Security fix for ghsa-m4cv-j2px-7723 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-m4cv-j2px-7723 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KS96155 Security fix for ghsa-3w6x-2g7m-8v23 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-3w6x-2g7m-8v23 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OV40735 Security fix for ghsa-cm33-6792-r9fm applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

ghsa-cm33-6792-r9fm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XK85655 Security fix for ghsa-6chq-wfr3-2hj9 applied in: kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-6chq-wfr3-2hj9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK94904 Security fix for ghsa-c3fc-8qff-9hwx applied in: apache-nifi 2.9.0-r0, apache-nifi-registry 2.9.0-r0, elasticsearch 9.2.7-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r0, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, spark-sc212-jdk17-py311 4.0.2-r1, spark-sc213-jdk17-py312 4.0.2-r1, wildfly 39.0.1-r0

ghsa-c3fc-8qff-9hwx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RW51509 Security fix for ghsa-pf86-5x62-jrwf applied in: kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

ghsa-pf86-5x62-jrwf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...