CLEANSTART-2026-FP42808

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-FP42808

Upstream

CVE-2026-56854

Published

2026-09-18T09:29:33Z

Modified

2026-10-09T07:45:26Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Security fix for CVE-2026-56854 applied in: cadvisor 0.55.1-r6, cortex 1.20.1-r5, dex 2.44.0-r8, dynatrace-operator 1.10.1-r1, dynatrace-operator 1.10.2-r1, dynatrace-operator 1.7.3-r5, dynatrace-operator 1.8.1-r8, dynatrace-operator 1.9.0-r6, external-secrets-operator 2.8.0-r3, fulcio 1.8.8-r2, go-discover 0_git20250325-r4, haproxy-ingress 0.13.19-r3, haproxy-ingress 0.14.12-r4, haproxy-ingress 0.15.4-r6, haproxy-ingress 0.16.1-r6, helm 3.21.4-r1, helm 4.2.4-r2, helm-operator 1.41.1-r5, helm-operator 1.42.3-r4, keda 2.17.2-r2, knative-serving 1.21.3-r4, knative-serving 1.22.1-r4, kube-state-metrics-fips 2.17.0-r4, kube-state-metrics-fips 2.19.1-r0, kube-vip-fips 0.9.2-r1, kyverno 1.16.4-r3, mailpit 1.29.7-r1, mailpit-fips 1.29.7-r1, minio-client 0.20250721.052808-r1, octo-sts 0.8.0-r1, opa 1.20.0-r2, opentelemetry-collector 0.154.0-r2, prometheus-node-exporter 1.10.2-r5, prometheus-node-exporter 1.9.1-r5, prometheus-node-exporter-fips 1.11.1-r3, prometheus-operator 0.90.1-r4, prometheus-operator 0.91.0-r5, prometheus-redis-exporter 1.87.0-r2, prometheus-redis-exporter 1.88.0-r3, rancher-fleet-agent 0.15.6-r0, restic 0.18.1-r6, restic-fips 0.18.1-r7, step-issuer 0.10.2-r6, step-issuer 0.11.0-r6, step-issuer 0.9.11-r4, tekton-chains-fips 0.29.1-r1, trust-manager 0.22.1-r4, vault 1.20.4-r10, vault-k8s 1.4.2-r2, vault-k8s 1.5.0.r4, victoriametrics-operator 0.73.1-r1

Details

CVE-2026-56854 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

cadvisor

Package

Name: cadvisor
Purl: pkg:apk/cleanstart/cadvisor

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.55.1-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

cortex

Package

Name: cortex
Purl: pkg:apk/cleanstart/cortex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.1-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

dex

Package

Name: dex
Purl: pkg:apk/cleanstart/dex

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.44.0-r8

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

dynatrace-operator

Package

Name: dynatrace-operator
Purl: pkg:apk/cleanstart/dynatrace-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

dynatrace-operator

Package

Name: dynatrace-operator
Purl: pkg:apk/cleanstart/dynatrace-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

dynatrace-operator

Package

Name: dynatrace-operator
Purl: pkg:apk/cleanstart/dynatrace-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.7.3-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

dynatrace-operator

Package

Name: dynatrace-operator
Purl: pkg:apk/cleanstart/dynatrace-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.8.1-r8

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

dynatrace-operator

Package

Name: dynatrace-operator
Purl: pkg:apk/cleanstart/dynatrace-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.9.0-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

external-secrets-operator

Package

Name: external-secrets-operator
Purl: pkg:apk/cleanstart/external-secrets-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.8.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

fulcio

Package

Name: fulcio
Purl: pkg:apk/cleanstart/fulcio

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.8.8-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

go-discover

Package

Name: go-discover
Purl: pkg:apk/cleanstart/go-discover

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0_git20250325-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

haproxy-ingress

Package

Name: haproxy-ingress
Purl: pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.13.19-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

haproxy-ingress

Package

Name: haproxy-ingress
Purl: pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.14.12-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

haproxy-ingress

Package

Name: haproxy-ingress
Purl: pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.15.4-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

haproxy-ingress

Package

Name: haproxy-ingress
Purl: pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.16.1-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

helm

Package

Name: helm
Purl: pkg:apk/cleanstart/helm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.21.4-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

helm

Package

Name: helm
Purl: pkg:apk/cleanstart/helm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.2.4-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

helm-operator

Package

Name: helm-operator
Purl: pkg:apk/cleanstart/helm-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.41.1-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

helm-operator

Package

Name: helm-operator
Purl: pkg:apk/cleanstart/helm-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.42.3-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

keda

Package

Name: keda
Purl: pkg:apk/cleanstart/keda

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.17.2-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.21.3-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

knative-serving

Package

Name: knative-serving
Purl: pkg:apk/cleanstart/knative-serving

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.22.1-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

kube-state-metrics-fips

Package

Name: kube-state-metrics-fips
Purl: pkg:apk/cleanstart/kube-state-metrics-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.17.0-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

kube-state-metrics-fips

Package

Name: kube-state-metrics-fips
Purl: pkg:apk/cleanstart/kube-state-metrics-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.19.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

kube-vip-fips

Package

Name: kube-vip-fips
Purl: pkg:apk/cleanstart/kube-vip-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.9.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

kyverno

Package

Name: kyverno
Purl: pkg:apk/cleanstart/kyverno

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.16.4-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

mailpit

Package

Name: mailpit
Purl: pkg:apk/cleanstart/mailpit

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.29.7-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

mailpit-fips

Package

Name: mailpit-fips
Purl: pkg:apk/cleanstart/mailpit-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.29.7-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

minio-client

Package

Name: minio-client
Purl: pkg:apk/cleanstart/minio-client

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.20250721.052808-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

octo-sts

Package

Name: octo-sts
Purl: pkg:apk/cleanstart/octo-sts

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.8.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

opa

Package

Name: opa
Purl: pkg:apk/cleanstart/opa

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.0-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

opentelemetry-collector

Package

Name: opentelemetry-collector
Purl: pkg:apk/cleanstart/opentelemetry-collector

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.154.0-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-node-exporter

Package

Name: prometheus-node-exporter
Purl: pkg:apk/cleanstart/prometheus-node-exporter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.2-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-node-exporter

Package

Name: prometheus-node-exporter
Purl: pkg:apk/cleanstart/prometheus-node-exporter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.9.1-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-node-exporter-fips

Package

Name: prometheus-node-exporter-fips
Purl: pkg:apk/cleanstart/prometheus-node-exporter-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.11.1-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-operator

Package

Name: prometheus-operator
Purl: pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.90.1-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-operator

Package

Name: prometheus-operator
Purl: pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.91.0-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-redis-exporter

Package

Name: prometheus-redis-exporter
Purl: pkg:apk/cleanstart/prometheus-redis-exporter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.87.0-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

prometheus-redis-exporter

Package

Name: prometheus-redis-exporter
Purl: pkg:apk/cleanstart/prometheus-redis-exporter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.88.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

rancher-fleet-agent

Package

Name: rancher-fleet-agent
Purl: pkg:apk/cleanstart/rancher-fleet-agent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.15.6-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

restic

Package

Name: restic
Purl: pkg:apk/cleanstart/restic

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.18.1-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

restic-fips

Package

Name: restic-fips
Purl: pkg:apk/cleanstart/restic-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.18.1-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

step-issuer

Package

Name: step-issuer
Purl: pkg:apk/cleanstart/step-issuer

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.10.2-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

step-issuer

Package

Name: step-issuer
Purl: pkg:apk/cleanstart/step-issuer

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.11.0-r6

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

step-issuer

Package

Name: step-issuer
Purl: pkg:apk/cleanstart/step-issuer

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.9.11-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

tekton-chains-fips

Package

Name: tekton-chains-fips
Purl: pkg:apk/cleanstart/tekton-chains-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.29.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

trust-manager

Package

Name: trust-manager
Purl: pkg:apk/cleanstart/trust-manager

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.22.1-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

vault

Package

Name: vault
Purl: pkg:apk/cleanstart/vault

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.4-r10

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

vault-k8s

Package

Name: vault-k8s
Purl: pkg:apk/cleanstart/vault-k8s

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.4.2-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

vault-k8s

Package

Name: vault-k8s
Purl: pkg:apk/cleanstart/vault-k8s

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.0.r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"

victoriametrics-operator

Package

Name: victoriametrics-operator
Purl: pkg:apk/cleanstart/victoriametrics-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.73.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-FP42808.json"