CLEANSTART-2026-FU09912 Security fix for CVE-2023-34091 applied in: kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r9

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QW73146 Security fix for ghsa-w573-9ffj-6ff9 applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, hazelcast 5.7.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.7-r3, keycloak 26.6.3-r2, kserve-modelmesh 0.12.0-r17, s3proxy 3.3.0-r2, solr 9.8.1-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

ghsa-w573-9ffj-6ff9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XH56428 Security fix for ghsa-5x3r-wrvg-rp6q applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.10-r1, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.1-r3, keycloak 26.6.3-r2, kserve-modelmesh 0.12.0-r17, s3proxy 3.3.0-r1, strimzi-kafka-operator 1.1.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 41.0.0-r1

ghsa-5x3r-wrvg-rp6q affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK86631 Security fix for ghsa-xmv7-r254-6q78 applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

ghsa-xmv7-r254-6q78 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NB58291 Security fix for ghsa-676x-f7gg-47vc applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

ghsa-676x-f7gg-47vc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TY33205 Security fix for ghsa-5pvg-856g-cp85 applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

ghsa-5pvg-856g-cp85 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FY04918 Security fix for ghsa-x4gw-5cx5-pgmh applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, cloud-config-server 4.3.2-r3, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.10-r1, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.1-r3, keycloak 26.6.3-r2, kserve-modelmesh 0.12.0-r17, s3proxy 3.3.0-r1, solr 9.8.1-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 41.0.0-r1

ghsa-x4gw-5cx5-pgmh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH49300 Security fix for ghsa-3qp7-7mw8-wx86 applied in: apache-hive 4.2.0-r5, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, cloud-config-server 4.3.2-r3, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.10-r1, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.1-r3, keycloak 26.6.3-r2, kserve-modelmesh 0.12.0-r17, s3proxy 3.3.0-r1, solr 9.8.1-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 41.0.0-r1

ghsa-3qp7-7mw8-wx86 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UX96534 Security fix for ghsa-wwpq-f5c3-7hvx applied in: apache-nifi-registry 2.9.0-r1, cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, kafka-ui 1.4.2-r6

ghsa-wwpq-f5c3-7hvx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RE14874 Security fix for ghsa-5843-p793-ghmm applied in: kafka-ui 1.4.2-r6

Security vulnerability affects the kafka-ui package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-NC72499 Security fix for ghsa-vxf7-qj7q-83fh applied in: apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, kafka-ui 1.4.2-r6

ghsa-vxf7-qj7q-83fh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KA19928 Security fix for ghsa-cvc6-q2cp-2xhw applied in: apache-nifi 2.9.0-r1, kafka-ui 1.4.2-r6

ghsa-cvc6-q2cp-2xhw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OF60690 Security fix for CVE-2026-22748 applied in: apache-nifi 2.7.2-r7, kafka-ui 1.4.2-r6

CVE-2026-22748 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GO18294 Security fix for CVE-2026-22746 applied in: apache-nifi 2.7.2-r7, cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, kafka-ui 1.4.2-r6, rundeck 6.0.0-r0

CVE-2026-22746 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WO51602 Security fix for CVE-2026-22751 applied in: apache-nifi 2.7.2-r7, cloud-config-server 4.1.7-r2, cloud-config-server 4.2.4-r0, cloud-config-server 4.3.2-r2, cloud-config-server 4.3.4-r0, kafka-ui 1.4.2-r6, rundeck 6.0.0-r0

CVE-2026-22751 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KE68240 Security fix for CVE-2026-22740 applied in: activemq 5.19.8-r3, apache-nifi 2.6.0-r3, kafka-ui 1.4.2-r6

CVE-2026-22740 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-YZ64001 Security fix for CVE-2026-45536 applied in: apache-hive 4.2.0-r5, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r3, cassandra 5.0.8-r1, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r2, elasticsearch 9.2.8-r0, elasticsearch 9.3.5-r2, elasticsearch 9.3.7-r1, elasticsearch 9.4.3-r1, hazelcast 5.7.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.2-r0, keycloak 26.4.7-r5, keycloak 26.5.7-r4, keycloak 26.6.3-r2, keycloak 26.6.3-r3, kserve-modelmesh 0.12.0-r17, s3proxy 3.3.0-r2, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3

CVE-2026-45536 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VE14667 Security fix for CVE-2026-47244 applied in: apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r3, elasticsearch 9.3.5-r2, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.10-r1, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.6-r6, keycloak 26.5.7-r1, keycloak 26.6.1-r3, keycloak 26.6.3-r2, kserve-modelmesh 0.12.0-r17, s3proxy 3.3.0-r1, strimzi-kafka-operator 1.1.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 41.0.0-r1

CVE-2026-47244 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XD15428 Security fix for CVE-2026-45673 applied in: apache-hive 4.2.0-r5, apache-nifi 2.9.0-r1, elasticsearch 9.3.5-r2, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-45673 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GJ61337 Security fix for CVE-2026-47691 applied in: apache-hive 4.2.0-r5, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.5-r2, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r2, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.2-r0, keycloak 26.4.7-r3, keycloak 26.5.7-r1, keycloak 26.6.3-r2, s3proxy 3.3.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1

CVE-2026-47691 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...