CLEANSTART-2026-QX69727 Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1

Security vulnerability affects the stargate package. Uncontrolled Resource Consumption vulnerability in Apache Commons Configuration 1...

CLEANSTART-2026-MA20686 Security fix for GHSA-pvp8-3xj6-8c6x applied in: stargate 2.0.44-r4

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-IZ40849 Security fix for GHSA-wjpw-4j6x-6rwh applied in: cassandra-reaper-fips 3.8.0-r3, stargate 2.0.44-r4

GHSA-wjpw-4j6x-6rwh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TN60409 Security fix for GHSA-qh8g-58pp-2wxh applied in: cassandra-reaper-fips 3.8.0-r3, stargate 2.0.44-r4

GHSA-qh8g-58pp-2wxh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UV01170 Connect2id Nimbus JOSE + JWT 10

Security vulnerability affects the stargate package. Connect2id Nimbus JOSE + JWT 10...

CLEANSTART-2026-MX59189 Security fix for GHSA-xwmg-2g98-w7v9 applied in: stargate 2.0.44-r4

Security vulnerability affects the stargate package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-FF23843 Netty is an asynchronous, event-driven network application framework

Security vulnerability affects the stargate package. Netty is an asynchronous, event-driven network application framework...

CLEANSTART-2026-UI81727 Security fix for GHSA-xq3w-v528-46rv applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cloudwatch-exporter 0.16.0-r0, kserve-modelmesh 0.12.0-r16, management-api-for-apache-cassandra-5.0 0.1.107-r0, management-api-for-apache-cassandra-5.0 0.1.108-r0, management-api-for-apache-cassandra-5.0 0.1.109-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-xq3w-v528-46rv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SP00436 Security fix for GHSA-5jpm-x58v-624v applied in: management-api-for-apache-cassandra-5.0 0.1.107-r0, management-api-for-apache-cassandra-5.0 0.1.108-r0, management-api-for-apache-cassandra-5.0 0.1.109-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-5jpm-x58v-624v affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MB73363 Security fix for GHSA-jq43-27x9-3v86 applied in: management-api-for-apache-cassandra-5.0 0.1.107-r0, management-api-for-apache-cassandra-5.0 0.1.108-r0, management-api-for-apache-cassandra-5.0 0.1.109-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-jq43-27x9-3v86 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZA32315 Security fix for GHSA-4g8c-wm8x-jfhw applied in: cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cloudwatch-exporter 0.16.0-r0, kserve-modelmesh 0.12.0-r16, management-api-for-apache-cassandra-5.0 0.1.107-r0, management-api-for-apache-cassandra-5.0 0.1.108-r0, management-api-for-apache-cassandra-5.0 0.1.109-r0, stargate 1.0.90-r4

GHSA-4g8c-wm8x-jfhw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JN57068 Security fix for GHSA-6v67-2wr5-gvf4 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.5-r0, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, stargate 1.0.90-r4

GHSA-6v67-2wr5-gvf4 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JM74413 Security fix for CVE-2025-11226 applied in: cassandra 5.0.6-r2, cassandra 5.0.8-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.5-r0, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 4.0.1-r1, confluent-common-docker 7.6.9-r3, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, schema-registry 7.7.8-r1, stargate 1.0.90-r4

CVE-2025-11226 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LN17304 Security fix for CVE-2024-12801 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.5-r0, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, stargate 1.0.90-r4

CVE-2024-12801 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TL76169 Security fix for GHSA-5mg8-w23w-74h3 applied in: cassandra 5.0.6-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r1, cassandra-reaper-fips 3.6.1-r3, cloud-config-server 4.3.2-r3, druid-fips 35.0.0-r1, maven 3.8.9-r1, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-5mg8-w23w-74h3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AM99343 Security fix for GHSA-xwmg-2g98-w7v9 applied in: druid-fips 35.0.0-r1, kafka-ui 1.2.0-r1, kafka-ui 1.3.0-r1, stargate 1.0.90-r4, stargate 1.0.91-r2, stargate 2.0.44-r5, stargate 2.0.44-r6, stargate 2.0.48-r0

GHSA-xwmg-2g98-w7v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZP61425 Security fix for GHSA-gvpg-vgmx-xg6w applied in: druid-fips 35.0.0-r1, stargate 1.0.90-r4

GHSA-gvpg-vgmx-xg6w affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FM94939 Security fix for GHSA-78wr-2p64-hpwj applied in: druid-fips 35.0.0-r1, orientdb 3.2.38-r0, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4

GHSA-78wr-2p64-hpwj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS99432 Security fix for GHSA-735f-pc8j-v9w8 applied in: druid-fips 35.0.0-r1, kserve-modelmesh 0.12.0-r16, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-735f-pc8j-v9w8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RG72444 Security fix for GHSA-g5ww-5jh7-63cx applied in: druid-fips 35.0.0-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-g5ww-5jh7-63cx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...