CLEANSTART-2026-CY10128

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-CY10128
Upstream
Published
2026-11-11T00:39:00Z
Modified
2026-11-11T01:00:05Z
Summary
Security fix for GO-2026-5932 applied in: velero 1.17.2-r15, gitea 1.27.3-r3, minio 0.20250907.161309-r9, velero 1.16.2-r19, velero 1.15.2-r15, opentelemetry-collector-contrib 0.163.0-r1, keda 2.20.2-r5
Details

GO-2026-5932 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart
velero

Package

Name
velero
Purl
pkg:apk/cleanstart/velero

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.17.2-r15

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
gitea

Package

Name
gitea
Purl
pkg:apk/cleanstart/gitea?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.27.3-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
gitea

Package

Name
gitea
Purl
pkg:apk/cleanstart/gitea?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.27.3-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
minio

Package

Name
minio
Purl
pkg:apk/cleanstart/minio

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20250907.161309-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
velero

Package

Name
velero
Purl
pkg:apk/cleanstart/velero

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.16.2-r19

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
velero

Package

Name
velero
Purl
pkg:apk/cleanstart/velero

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.15.2-r15

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
opentelemetry-collector-contrib

Package

Name
opentelemetry-collector-contrib
Purl
pkg:apk/cleanstart/opentelemetry-collector-contrib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.163.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"
keda

Package

Name
keda
Purl
pkg:apk/cleanstart/keda

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.2-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CY10128.json"