CLEANSTART-2026-CZ72491

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-CZ72491
Upstream
  • ghsa-5cv4-jp36-h3mw
Published
2026-09-18T09:52:46Z
Modified
2026-10-09T07:46:02Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H CVSS Calculator
Summary
Security fix for ghsa-5cv4-jp36-h3mw applied in: cfssl 1.5.0-r1, etcd-fips 3.6.13-r1, postgres-operator 1.12.2-r2, smarter-device-manager-fips 1.20.11-r1, tempo 2.10.4-r1, temporal-ui-server-fips 2.51.1-r1, velero-plugin-for-aws-fips 1.14.2-r1, yunikorn-k8shim 1.5.2-r1
Details

ghsa-5cv4-jp36-h3mw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart
cfssl

Package

Name
cfssl
Purl
pkg:apk/cleanstart/cfssl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.5.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
etcd-fips

Package

Name
etcd-fips
Purl
pkg:apk/cleanstart/etcd-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.6.13-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
postgres-operator

Package

Name
postgres-operator
Purl
pkg:apk/cleanstart/postgres-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.12.2-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
smarter-device-manager-fips

Package

Name
smarter-device-manager-fips
Purl
pkg:apk/cleanstart/smarter-device-manager-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.20.11-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
tempo

Package

Name
tempo
Purl
pkg:apk/cleanstart/tempo

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.10.4-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
temporal-ui-server-fips

Package

Name
temporal-ui-server-fips
Purl
pkg:apk/cleanstart/temporal-ui-server-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.51.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
velero-plugin-for-aws-fips

Package

Name
velero-plugin-for-aws-fips
Purl
pkg:apk/cleanstart/velero-plugin-for-aws-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.14.2-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"
yunikorn-k8shim

Package

Name
yunikorn-k8shim
Purl
pkg:apk/cleanstart/yunikorn-k8shim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.5.2-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-CZ72491.json"