CLEANSTART-2026-AM93725 Security fix for GHSA-v9jr-rg53-9pgp applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-v9jr-rg53-9pgp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PO95463 Security fix for GHSA-h7mw-gpvr-xq4m applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-h7mw-gpvr-xq4m affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VD08699 Security fix for GHSA-w5hq-g745-h8pq applied in: kibana 9.3.2-r3, mongosh 2.5.10-r5, mongosh 2.6.0-r4, mongosh 2.8.2-r2, opensearch-dashboards-fips 3.5.0-r0, sqlpad 7.5.7-r3

GHSA-w5hq-g745-h8pq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KV71564 Security fix for GHSA-v39h-62p7-jpjc applied in: argo-workflows 3.7.17-r1, kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

GHSA-v39h-62p7-jpjc affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PE96268 Security fix for GHSA-rp42-5vxx-qpwr applied in: kibana 9.3.2-r3, mongosh 2.5.10-r5, mongosh 2.6.0-r4, mongosh 2.8.2-r3, proxy-agent 6.5.0-r0, proxy-agent 7.0.0-r2, proxy-agent 8.0.2-r0

GHSA-rp42-5vxx-qpwr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RD64552 Security fix for GHSA-q3j6-qgpj-74h6 applied in: argo-workflows 3.7.17-r1, kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r2

GHSA-q3j6-qgpj-74h6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UC56558 Security fix for CVE-2022-33987 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4

CVE-2022-33987 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MV85464 Security fix for GHSA-q8qp-cvcw-x6jj applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-q8qp-cvcw-x6jj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WH80314 Security fix for GHSA-m7pr-hjqh-92cm applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-m7pr-hjqh-92cm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DC50451 Security fix for GHSA-vf2m-468p-8v99 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-vf2m-468p-8v99 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HP56001 Security fix for GHSA-5c9x-8gcm-mpgx applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-5c9x-8gcm-mpgx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IK83988 Security fix for CVE-2022-25881 applied in: mongosh 2.5.10-r5, mongosh 2.6.0-r4

CVE-2022-25881 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HP63393 Security fix for GHSA-445q-vr5w-6q77 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-445q-vr5w-6q77 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RK60048 Security fix for GHSA-xxqh-mfjm-7mv9 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-xxqh-mfjm-7mv9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NR30483 Security fix for GHSA-62hf-57xw-28j9 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-62hf-57xw-28j9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EP14815 Security fix for GHSA-crv5-9vww-q3g8 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-crv5-9vww-q3g8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NG55070 Security fix for CVE-2026-41650 applied in: jitsucom-jitsu 2.14.0-r1, mongosh 2.6.0-r4, mongosh 2.8.2-r3

CVE-2026-41650 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XR61334 Security fix for GHSA-wg6q-6289-32hp applied in: apache-nifi 2.9.0-r0, apache-nifi-registry 2.9.0-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r0, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, wildfly 39.0.1-r0

GHSA-wg6q-6289-32hp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WS59650 Security fix for GHSA-pmwg-cvhr-8vh7 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-pmwg-cvhr-8vh7 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FR80106 Security fix for GHSA-p6xx-57qc-3wxr applied in: opensearch-dashboards-fips 2.19.5-r0

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-CK33786 Security fix for GHSA-gh4j-gqv2-49f6 applied in: mongosh 2.6.0-r4, mongosh 2.8.2-r3, opensearch-dashboards-fips 3.5.0-r1

GHSA-gh4j-gqv2-49f6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KY86069 Security fix for GHSA-v8h7-rr48-vmmv applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-v8h7-rr48-vmmv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KC30264 Security fix for GHSA-rwm7-x88c-3g2p applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, confluent-common-docker 7.6.9-r5, kafka-fips 3.8.1-r11, keycloak 26.4.11-r2, keycloak 26.5.7-r0, stargate 1.0.91-r2, stargate 2.0.48-r0

GHSA-rwm7-x88c-3g2p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BV20490 Security fix for GHSA-q5qw-h33p-qvwr applied in: opensearch-dashboards-fips 2.19.5-r0

Security vulnerability affects the opensearch-dashboards-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-QF31324 Security fix for GHSA-rc95-pcm8-65v9 applied in: keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.4.7-r3, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1

GHSA-rc95-pcm8-65v9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IW47152 Security fix for GHSA-w9j2-pvgh-6h63 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-w9j2-pvgh-6h63 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TK91249 Security fix for GHSA-p93r-85wp-75v3 applied in: elasticsearch 9.2.7-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, wildfly 39.0.1-r0

GHSA-p93r-85wp-75v3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HW56011 Security fix for GHSA-mj4r-2hfc-f8p6 applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cassandra 5.0.8-r1, cassandra-fips 5.0.6-r2, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, confluent-common-docker 7.6.9-r4, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-fips 3.8.1-r11, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-mj4r-2hfc-f8p6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HX67191 Security fix for GHSA-m4cv-j2px-7723 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-m4cv-j2px-7723 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KS96155 Security fix for GHSA-3w6x-2g7m-8v23 applied in: opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-3w6x-2g7m-8v23 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XK85655 Security fix for GHSA-6chq-wfr3-2hj9 applied in: kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-6chq-wfr3-2hj9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OV40735 Security fix for GHSA-cm33-6792-r9fm applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-cm33-6792-r9fm affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RW51509 Security fix for GHSA-pf86-5x62-jrwf applied in: kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-pf86-5x62-jrwf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-GK94904 Security fix for GHSA-c3fc-8qff-9hwx applied in: apache-nifi 2.9.0-r0, apache-nifi-registry 2.9.0-r0, elasticsearch 9.2.7-r0, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r0, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, kserve-modelmesh 0.9.0-r1, logstash-fips 9.4.3-r1, spark-sc212-jdk17-py311 4.0.2-r1, spark-sc213-jdk17-py312 4.0.2-r1, wildfly 39.0.1-r0

GHSA-c3fc-8qff-9hwx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IB51181 Security fix for GHSA-98qh-xjc8-98pq applied in: keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1

GHSA-98qh-xjc8-98pq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS11669 Security fix for GHSA-jg4p-7fhp-p32p applied in: kibana 9.3.2-r3, opensearch-dashboards-fips 2.19.5-r0, opensearch-dashboards-fips 3.5.0-r1

GHSA-jg4p-7fhp-p32p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-AX30429 Security fix for GHSA-45q3-82m4-75jr applied in: apache-hive 4.2.0-r3, apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-45q3-82m4-75jr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FU44475 Security fix for GHSA-57rv-r2g8-2cj3 applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.7-r0, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-57rv-r2g8-2cj3 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QH29920 Security fix for GHSA-38f8-5428-x5cv applied in: apache-nifi 2.10.0-r1, apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.7-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.7-r0, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, wildfly 39.0.1-r0

GHSA-38f8-5428-x5cv affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UO65217 Security fix for CVE-2026-42587 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, strimzi-kafka-operator 1.1.0-r1, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42587 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PE62023 Security fix for CVE-2026-42585 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42585 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RZ47528 Security fix for CVE-2026-42583 applied in: apache-hive 4.2.0-r3, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.8.0-r9, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, confluent-common-docker 7.6.9-r4, elasticsearch 9.2.7-r0, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-fips 3.8.1-r11, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, solr 9.8.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42583 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SS19101 Security fix for CVE-2026-42584 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, spark 3.5.9-r2, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42584 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IZ96145 Security fix for CVE-2026-42581 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, spark 3.5.9-r2, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42581 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZC93700 Security fix for CVE-2026-41506 applied in: argo-cd 3.2.7-r2, argo-cd 3.3.5-r2, external-secrets-fips 0.17.0-r2, grafana-alloy 1.16.0-r0, grafana-alloy-fips 1.16.0-r0, kubevela 1.10.8-r0, kyverno 1.16.4-r3, pulumi-kubernetes-operator 2.7.0-r0, timoni 0.25.2-r0

CVE-2026-41506 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QN08817 Security fix for CVE-2026-42580 applied in: apache-activemq-artemis 2.56.0-r1, apache-nifi 2.9.0-r1, cloud-config-server 4.3.2-r3, cloudwatch-exporter 0.16.0-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, opensearch 3.6.0-r4, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42580 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IT89059 Security fix for CVE-2026-42579 applied in: apache-hive 4.2.0-r3, apache-nifi 2.9.0-r1, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r1, elasticsearch 9.4.3-r1, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42579 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RX83323 Security fix for CVE-2026-42577 applied in: apache-nifi 2.9.0-r1, apache-nifi-registry 2.9.0-r3, confluent-common-docker 7.6.9-r5, kafka-fips 3.8.1-r11, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, stargate 2.0.48-r0, trino 480-r3, wavefront-proxy 13.7-r2, wavefront-proxy 13.9-r2

CVE-2026-42577 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BZ01230 Security fix for CVE-2026-42578 applied in: apache-hive 4.2.0-r3, apache-nifi 2.9.0-r1, cassandra 5.0.8-r1, elasticsearch 9.2.8-r0, elasticsearch 9.3.7-r0, elasticsearch 9.4.3-r0, hazelcast 5.7.0-r1, incubator-kie-kogito-data-index-ephemeral 10.1.0-r1, kafka-ui 1.4.2-r6, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.7-r0, keycloak 26.6.1-r1, keycloak 26.6.1-r2, kserve-modelmesh 0.12.0-r17, management-api-for-apache-cassandra-5.0 0.1.118-r2, s3proxy 3.3.0-r1, stargate 1.0.91-r2, stargate 2.0.44-r6, stargate 2.0.48-r0, thingsboard 4.2.2.3-r1, thingsboard 4.3.1.3-r1, trino 480-r3, wildfly 39.0.1-r0

CVE-2026-42578 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FS84990 Security fix for CVE-2026-42198 applied in: keycloak 26.3.5-r3, keycloak 26.4.10-r0, keycloak 26.4.11-r2, keycloak 26.5.5-r1, keycloak 26.5.6-r5, keycloak 26.5.7-r0, keycloak 26.6.1-r1, sonarqube 25.12.0.117093-r1, sonarqube 26.3.0.120487-r1

CVE-2026-42198 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...