CLEANSTART-2026-IW13101 Security fixes in cassandra-reaper-fips 3.7.1-r4

Package cassandra-reaper-fips version 3.7.1-r4 fixes 42 vulnerabilities: CVE-2022-1471, CVE-2022-38752, CVE-2022-41854, CVE-2025-52999, ghsa-72hv-8253-57qq...

CVE-2026-59901 vulnerabilities

Vulnerabilities for packages: tez, cassandra-reaper, akhq, spark, keycloak, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, flyway, apicurio-registry, apache-pulsar, apache-activemq-artemis, cloudwatch-exporter, apache-nifi, cassandra, infinispan, thingsboard,...

GHSA-558V-64GR-WGG4 vulnerabilities

Vulnerabilities for packages: tez, cassandra-reaper, akhq, spark, keycloak, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, flyway, apicurio-registry, apache-pulsar, apache-activemq-artemis, cloudwatch-exporter, apache-nifi, cassandra, infinispan, thingsboard,...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: sonarqube, sonar-scanner-cli, airbyte-server-fips, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, apache-nifi-registry, akhq, thingsboard, airbyte-server, kafbat-ui, cassandra, cassandra-fips, keycloak-config-cli, trino,...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: sonarqube, sonar-scanner-cli, airbyte-server-fips, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-4.1, apache-nifi-registry, akhq, thingsboard, airbyte-server, kafbat-ui, cassandra, cassandra-fips, keycloak-config-cli, trino,...

GHSA-JHQ6-GFMJ-V8FX vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-nifi, cassandra, kserve-modelmesh, thingsboard, keycloak-config-cli, nextflow, trino, akhq, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, zookeeper, apache-nifi-registry...

CVE-2026-10532 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, apache-nifi, cassandra, kserve-modelmesh, thingsboard, keycloak-config-cli, nextflow, trino, akhq, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, zookeeper, apache-nifi-registry...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerabilities have been resolved: cgroup: Defer the CSS kill operation on rmdir until after the cgroup is emptied. A series of commits back to v7.0 revised rmdir to comply with the controller invariant, which states that the -cssoffline method of a subsystem...

Reaper macOS Infostealer Abuses Script Editor to Steal Crypto and Passwords

Threat actors are deploying an updated SHub Stealer variant named Reaper that exploits the native macOS Script Editor to bypass OS-level protections and compromise cryptocurrency assets...

New Reaper Malware Uses Fake Microsoft Domain to Steal macOS Passwords

The newly discovered Reaper malware bypasses Apple's macOS Tahoe 26.4 security updates to steal passwords, crypto assets, and install a permanent backdoor...

CLEANSTART-2026-GH89210 Security fixes for CVE-2015-0886, CVE-2020-8908, CVE-2022-1471, CVE-2022-24823, CVE-2022-38752, CVE-2022-41854, CVE-2023-2976, CVE-2023-34462, CVE-2024-12798, CVE-2024-12801, CVE-2024-13009, CVE-2024-47535, CVE-2024-6763, CVE-2024-8184, CVE-2024-9823, CVE-2025-11143, CVE-2025-24970, CVE-2025-25193, CVE-2025-48734, CVE-2025-48924, CVE-2025-52999, CVE-2025-58057, CVE-2026-1225, CVE-2026-23901, CVE-2026-44431, CVE-2026-44432, ghsa-25qh-j22f-pwp8, ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4g8c-wm8x-jfhw, ghsa-5mg8-w23w-74h3, ghsa-6mjq-h674-j845, ghsa-6v67-2wr5-gvf4, ghsa-72hv-8253-57qq, ghsa-7g45-4rm6-3mm3, ghsa-9h6p-92jq-888x, ghsa-9w3m-gqgf-c4p9, ghsa-c4qc-4q9p-m9q9, ghsa-g8m5-722r-8whq, ghsa-gc5v-m9x4-r6x2, ghsa-h46c-h94j-95f3, ghsa-j26w-f9rq-mr2q, ghsa-j288-q9x7-2f5v, ghsa-jc7h-c423-mpjc, ghsa-mf9v-mfxr-j63j, ghsa-mjmj-j48q-9wg2, ghsa-pr98-23f8-jwxv, ghsa-q4rv-gq96-w7c5, ghsa-qccp-gfcp-xxvc, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v, ghsa-w37g-rhq8-7m4j, ghsa-wjpw-4j6x-6rwh, ghsa-wxr5-93ph-8wr9, ghsa-xq3w-v528-46rv applied in versions: 3.6.1-r0, 3.6.1-r1, 3.6.1-r2, 3.6.1-r3, 3.6.1-r4

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EP51501 Security fixes for CVE-2024-6763, CVE-2025-11143, CVE-2026-1225, CVE-2026-22184, CVE-2026-27171, CVE-2026-34757, CVE-2026-44431, CVE-2026-44432, ghsa-25qh-j22f-pwp8, ghsa-72hv-8253-57qq, ghsa-gc5v-m9x4-r6x2, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v applied in versions: 4.0.1-r1, 4.0.1-r2, 4.0.1-r3, 4.0.1-r4

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LZ07533 Security fixes for CVE-2026-44431, CVE-2026-44432, ghsa-gc5v-m9x4-r6x2, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 3.8.0-r3, 3.8.0-r7

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-RWM7-X88C-3G2P vulnerabilities

Vulnerabilities for packages: pinot, spark-kubernetes-operator-fips, camunda-zeebe, neo4j, strimzi-kafka-operator, apache-pulsar, flyway-fips, apache-activemq-artemis, kafka, tez, camunda, apache-hop, seata, wavefront-proxy, keycloak-fips, spark-kubernetes-operator,...

CVE-2026-42577 vulnerabilities

Vulnerabilities for packages: pinot, spark-kubernetes-operator-fips, camunda-zeebe, neo4j, strimzi-kafka-operator, apache-pulsar, flyway-fips, apache-activemq-artemis, kafka, tez, camunda, apache-hop, seata, wavefront-proxy, keycloak-fips, spark-kubernetes-operator,...

CVE-2026-42577 vulnerabilities

Vulnerabilities for packages: tez, cassandra-reaper, kserve-modelmesh, akhq, spark, keycloak, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, solr, flyway, trino, celeborn, zipkin, wildfly, apache-pulsar, apache-activemq-artemis, apache-nifi, cassandra, infinispan,...

GHSA-RWM7-X88C-3G2P vulnerabilities

Vulnerabilities for packages: tez, cassandra-reaper, kserve-modelmesh, akhq, spark, keycloak, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, solr, flyway, trino, celeborn, zipkin, wildfly, apache-pulsar, apache-activemq-artemis, apache-nifi, cassandra, infinispan,...

CLEANSTART-2026-TX96881 Security fixes for CVE-2024-6763, CVE-2026-1225, ghsa-25qh-j22f-pwp8, ghsa-72hv-8253-57qq, ghsa-qh8g-58pp-2wxh, ghsa-qqpg-mvqg-649v applied in versions: 4.0.1-r2

Multiple security vulnerabilities affect the cassandra-reaper-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: ruby3.3-jrjackson, tez, cassandra-reaper, gradle, kserve-modelmesh, kafka, nextflow, spdx-tools-java, ruby4.0-jrjackson, akhq, spark, management-api-for-apache-cassandra-5.0, neo4j, strimzi-kafka-operator, solr, flyway, opensearch, trino, dependency-track, celeborn,...

GHSA-72HV-8253-57QQ vulnerabilities

Vulnerabilities for packages: camunda-zeebe, kafka, seata, akhq, hono, kayenta-fips, jenkins, ruby3.2-jrjackson, commercial-elasticsearch, thingsboard, infinispan, gradle, kafka-bridge-fips, cass-config-builder, cassandra-reaper, nacos, confluent-kafka, nextflow, logstash-fips, py3-vllm-cuda-12.4...