CLEANSTART-2026-BV16840

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-BV16840

Upstream

CVE-2026-2332

Published

2026-09-18T10:19:21Z

Modified

2026-10-09T07:45:34Z

Severity

9.1 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVSS Calculator

Summary

Security fix for CVE-2026-2332 applied in: activemq 6.2.6-r0, activemq 6.2.8-r2, apache-hive 4.0.0-r0, apache-hive 4.0.1-r8, apache-hive 4.2.0-r1, apache-nifi 2.6.0-r3, apache-nifi 2.9.0-r0, apache-zookeeper 3.7.2-r6, apache-zookeeper 3.9.5-r8, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.1-r3, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.2.5-r1, confluent-kafka 8.2.0-r0, kafka 4.0.1-r4, kafka 4.0.2-r0, kafka 4.1.2-r0, kafka-fips 3.8.1-r10, kafka-fips 4.0.2-r1, schema-registry 7.9.6-r0, solr 9.10.1-r7, solr 9.8.1-r2, stargate 1.0.91-r2, stargate 2.0.48-r0, strimzi-kafka-operator 0.50.1-r2, strimzi-kafka-operator 0.51.0-r1

Details

CVE-2026-2332 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

activemq

Package

Name: activemq
Purl: pkg:apk/cleanstart/activemq

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.2.6-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

activemq

Package

Name: activemq
Purl: pkg:apk/cleanstart/activemq

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.2.8-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-hive

Package

Name: apache-hive
Purl: pkg:apk/cleanstart/apache-hive

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-hive

Package

Name: apache-hive
Purl: pkg:apk/cleanstart/apache-hive

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.1-r8

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-hive

Package

Name: apache-hive
Purl: pkg:apk/cleanstart/apache-hive

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.2.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-nifi

Package

Name: apache-nifi
Purl: pkg:apk/cleanstart/apache-nifi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.6.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-nifi

Package

Name: apache-nifi
Purl: pkg:apk/cleanstart/apache-nifi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.9.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-zookeeper

Package

Name: apache-zookeeper
Purl: pkg:apk/cleanstart/apache-zookeeper?arch=noarch

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.7.2-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

apache-zookeeper

Package

Name: apache-zookeeper
Purl: pkg:apk/cleanstart/apache-zookeeper?arch=noarch

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.9.5-r8

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

cassandra-reaper-fips

Package

Name: cassandra-reaper-fips
Purl: pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.8.0-r9

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

cassandra-reaper-fips

Package

Name: cassandra-reaper-fips
Purl: pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.1-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

cassandra-reaper-fips

Package

Name: cassandra-reaper-fips
Purl: pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.2-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

cassandra-reaper-fips

Package

Name: cassandra-reaper-fips
Purl: pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.2.5-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

confluent-kafka

Package

Name: confluent-kafka
Purl: pkg:apk/cleanstart/confluent-kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8.2.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

kafka

Package

Name: kafka
Purl: pkg:apk/cleanstart/kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.1-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

kafka

Package

Name: kafka
Purl: pkg:apk/cleanstart/kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.2-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

kafka

Package

Name: kafka
Purl: pkg:apk/cleanstart/kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.2-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

kafka-fips

Package

Name: kafka-fips
Purl: pkg:apk/cleanstart/kafka-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.8.1-r10

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

kafka-fips

Package

Name: kafka-fips
Purl: pkg:apk/cleanstart/kafka-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

schema-registry

Package

Name: schema-registry
Purl: pkg:apk/cleanstart/schema-registry?arch=noarch

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.9.6-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

solr

Package

Name: solr
Purl: pkg:apk/cleanstart/solr

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.10.1-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

solr

Package

Name: solr
Purl: pkg:apk/cleanstart/solr

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.8.1-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

stargate

Package

Name: stargate
Purl: pkg:apk/cleanstart/stargate

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.0.91-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

stargate

Package

Name: stargate
Purl: pkg:apk/cleanstart/stargate

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.48-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

strimzi-kafka-operator

Package

Name: strimzi-kafka-operator
Purl: pkg:apk/cleanstart/strimzi-kafka-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.50.1-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"

strimzi-kafka-operator

Package

Name: strimzi-kafka-operator
Purl: pkg:apk/cleanstart/strimzi-kafka-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.51.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-BV16840.json"