CLEANSTART-2026-ER85100

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-ER85100

Upstream

CVE-2026-94439

Published

2026-10-22T00:39:40Z

Modified

2026-10-22T01:00:06Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...

Details

CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details.

References

Affected packages

CleanStart

kubernetes

Package

Name: kubernetes
Purl: pkg:apk/cleanstart/kubernetes

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.36.4-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

prometheus-alertmanager

Package

Name: prometheus-alertmanager
Purl: pkg:apk/cleanstart/prometheus-alertmanager

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.33.1-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

kyverno

Package

Name: kyverno
Purl: pkg:apk/cleanstart/kyverno

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.17.2-r8

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

keda

Package

Name: keda
Purl: pkg:apk/cleanstart/keda

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.20.2-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.23.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.23.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.23.0-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.23.0-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

kyverno

Package

Name: kyverno
Purl: pkg:apk/cleanstart/kyverno

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.16.4-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.21.3-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.21.3-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.4-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.4-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.22.1-r9

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.22.1-r9

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.21.4-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.21.4-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.22.1-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-net-istio

Package

Name: knative-net-istio
Purl: pkg:apk/cleanstart/knative-net-istio?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.22.1-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.3-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.3-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

rclone

Package

Name: rclone
Purl: pkg:apk/cleanstart/rclone

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.72.1-r15

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

rclone

Package

Name: rclone
Purl: pkg:apk/cleanstart/rclone

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.73.5-r9

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

rclone

Package

Name: rclone
Purl: pkg:apk/cleanstart/rclone

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.74.3-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

rclone

Package

Name: rclone
Purl: pkg:apk/cleanstart/rclone

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.74.4-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

haproxy-ingress

Package

Name: haproxy-ingress
Purl: pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.15.4-r10

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

haproxy-ingress

Package

Name: haproxy-ingress
Purl: pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.13.19-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"

rundeck

Package

Name: rundeck
Purl: pkg:apk/cleanstart/rundeck

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

6.1.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-ER85100.json"