CLEANSTART-2026-JK47870 Security fixes for CVE-2025-66614, CVE-2026-1225, CVE-2026-24281, CVE-2026-24308, CVE-2026-24733, ghsa-6rw7-vpxm-498p, ghsa-73rr-hh4g-fpgx, ghsa-8qq5-rm4j-mr97, ghsa-wqch-xfxh-vrr4 applied in versions: 4.2.1.1-r1, 4.3.1-r0

Multiple security vulnerabilities affect the thingsboard package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-4926 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, thingsboard, vitess, saf, tileserver-gl...

GHSA-6HCQ-HMM3-JJ3C vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

CVE-2026-4923 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, thingsboard, vitess, saf, tileserver-gl...

GHSA-J3Q9-MXJG-W52F vulnerabilities

Vulnerabilities for packages: langfuse, code-server, thingsboard, vitess, saf, tileserver-gl...

GHSA-4773-3JFM-QMX3 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

CVE-2026-22735 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

CVE-2026-22737 vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, thingsboard...

GHSA-27V5-C462-WPQ7 vulnerabilities

Vulnerabilities for packages: langfuse, code-server, thingsboard, vitess, saf, tileserver-gl...

GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: zipkin, spark, druid, sonarqube, trino, thingsboard, wavefront-proxy, kserve-modelmesh, wildfly, apicurio-registry, neo4j, management-api-for-apache-cassandra-5.0, opensearch, keycloak, celeborn, apache-pulsar, flyway, infinispan, strimzi-kafka-operator, akhq...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: zipkin, spark, druid, sonarqube, trino, thingsboard, wavefront-proxy, kserve-modelmesh, wildfly, apicurio-registry, neo4j, management-api-for-apache-cassandra-5.0, opensearch, keycloak, celeborn, apache-pulsar, flyway, infinispan, strimzi-kafka-operator, akhq...

GHSA-W9FJ-CFPG-GRVV vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, localstack, elasticsearch, knative-kafka-broker, opensearch-fips, tinkerpop, wazuh-indexer, apache-hop, strimzi-kafka-operator, apache-camel-karavan-devmode, opensearch, kafbat-ui, druid, sonarqube, elasticsearch-fips,...

CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, localstack, elasticsearch, knative-kafka-broker, opensearch-fips, tinkerpop, wazuh-indexer, apache-hop, strimzi-kafka-operator, apache-camel-karavan-devmode, opensearch, kafbat-ui, druid, sonarqube, elasticsearch-fips,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: zipkin, spark, druid, sonarqube, trino, thingsboard, wavefront-proxy, tez, kserve-modelmesh, apicurio-registry, wildfly, management-api-for-apache-cassandra-5.0, opensearch, keycloak, celeborn, logstash, apache-pulsar, flyway, infinispan, apache-activemq-artemis,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: zipkin, spark, druid, sonarqube, trino, thingsboard, wavefront-proxy, tez, kserve-modelmesh, apicurio-registry, wildfly, management-api-for-apache-cassandra-5.0, opensearch, keycloak, celeborn, logstash, apache-pulsar, flyway, infinispan, apache-activemq-artemis,...

CVE-2026-33870 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, localstack, elasticsearch, knative-kafka-broker, opensearch-fips, tez, tinkerpop, wazuh-indexer, strimzi-kafka-operator, apache-camel-karavan-devmode, opensearch, kafbat-ui, druid, sonarqube, elasticsearch-fips,...

GHSA-PWQR-WMGM-9RR8 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.0, localstack, elasticsearch, knative-kafka-broker, opensearch-fips, tez, tinkerpop, wazuh-indexer, strimzi-kafka-operator, apache-camel-karavan-devmode, opensearch, kafbat-ui, druid, sonarqube, elasticsearch-fips,...

GHSA-CRHR-QQJ8-RPXC vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-activemq-artemis, spark, zookeeper, druid, solr, apache-nifi, kserve-modelmesh, thingsboard, trino, strimzi-kafka-operator, akhq, tez...

CVE-2026-24308 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-activemq-artemis, spark, zookeeper, druid, solr, apache-nifi, kserve-modelmesh, thingsboard, trino, strimzi-kafka-operator, akhq, tez...

CLEANSTART-2026-SP64433 Security fixes for GHSA-6RW7-VPXM-498P, GHSA-73RR-HH4G-FPGX, GHSA-8QQ5-RM4J-MR97 applied in versions: 4.2.1.1-r1

Multiple security vulnerabilities affect the thingsboard package. These issues are resolved in later releases. See references for individual vulnerability details...