CLEANSTART-2026-GR33926

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-GR33926
Upstream
Published
2026-10-31T13:45:10Z
Modified
2026-10-31T16:01:41Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Downloading and building modules with malicious version strings can cause local code execution
Details

CVE-2025-68119 affects multiple packages. Downloading and building modules with malicious version strings can cause local code execution. See references for individual vulnerability details.

References

Affected packages

CleanStart
gatekeeper

Package

Name
gatekeeper
Purl
pkg:apk/cleanstart/gatekeeper

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.20.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"
gatekeeper-fips

Package

Name
gatekeeper-fips
Purl
pkg:apk/cleanstart/gatekeeper-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.20.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"
newrelic-k8s-metadata-injection

Package

Name
newrelic-k8s-metadata-injection
Purl
pkg:apk/cleanstart/newrelic-k8s-metadata-injection

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.39.2-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"
nats-server-fips

Package

Name
nats-server-fips
Purl
pkg:apk/cleanstart/nats-server-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.10.29-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"
cloudflared

Package

Name
cloudflared
Purl
pkg:apk/cleanstart/cloudflared

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2025.11.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"
go-fips-1.24

Package

Name
go-fips-1.24
Purl
pkg:apk/cleanstart/go-fips-1.24

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.11-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"
go-fips-1.24

Package

Name
go-fips-1.24
Purl
pkg:apk/cleanstart/go-fips-1.24

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.25.5-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-GR33926.json"