CLEANSTART-2026-IG41363

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-IG41363
Upstream
Published
2026-10-30T18:03:31Z
Modified
2026-10-31T01:01:25Z
Severity
  • 6.1 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVSS Calculator
Summary
Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used
Details

CVE-2026-32289 affects multiple packages. Context was not properly tracked across template branches for JS template literals, leading to possibly incorrect escaping of content when branches were used. See references for individual vulnerability details.

References

Affected packages

CleanStart
kubernetes-csi-external-provisioner-fips

Package

Name
kubernetes-csi-external-provisioner-fips
Purl
pkg:apk/cleanstart/kubernetes-csi-external-provisioner-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.2.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
lvm-driver

Package

Name
lvm-driver
Purl
pkg:apk/cleanstart/lvm-driver

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
wazero

Package

Name
wazero
Purl
pkg:apk/cleanstart/wazero

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.11.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
stakater-reloader-fips

Package

Name
stakater-reloader-fips
Purl
pkg:apk/cleanstart/stakater-reloader-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
prometheus-operator

Package

Name
prometheus-operator
Purl
pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.89.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
k8sgpt

Package

Name
k8sgpt
Purl
pkg:apk/cleanstart/k8sgpt

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.1.8-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
k8sgpt-operator

Package

Name
k8sgpt-operator
Purl
pkg:apk/cleanstart/k8sgpt-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.2.27-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
volume-modifier-for-k8s-fips

Package

Name
volume-modifier-for-k8s-fips
Purl
pkg:apk/cleanstart/volume-modifier-for-k8s-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.9.5-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
consul-k8s-fips

Package

Name
consul-k8s-fips
Purl
pkg:apk/cleanstart/consul-k8s-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.14-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
argo-events

Package

Name
argo-events
Purl
pkg:apk/cleanstart/argo-events

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.6.3-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
local-static-provisioner-fips

Package

Name
local-static-provisioner-fips
Purl
pkg:apk/cleanstart/local-static-provisioner-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.8.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
volume-modifier-for-k8s

Package

Name
volume-modifier-for-k8s
Purl
pkg:apk/cleanstart/volume-modifier-for-k8s

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.9.5-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
multus-cni-fips

Package

Name
multus-cni-fips
Purl
pkg:apk/cleanstart/multus-cni-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
cert-manager

Package

Name
cert-manager
Purl
pkg:apk/cleanstart/cert-manager

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.4-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
prometheus-operator

Package

Name
prometheus-operator
Purl
pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.88.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
kubernetes-csi-livenessprobe-fips

Package

Name
kubernetes-csi-livenessprobe-fips
Purl
pkg:apk/cleanstart/kubernetes-csi-livenessprobe-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.17.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
paranoia

Package

Name
paranoia
Purl
pkg:apk/cleanstart/paranoia

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.5.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
kubernetes-csi-driver-nfs-fips

Package

Name
kubernetes-csi-driver-nfs-fips
Purl
pkg:apk/cleanstart/kubernetes-csi-driver-nfs-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.13.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
kyverno-policy-reporter-kyverno-plugin-fips

Package

Name
kyverno-policy-reporter-kyverno-plugin-fips
Purl
pkg:apk/cleanstart/kyverno-policy-reporter-kyverno-plugin-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.6.4-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
opentofu-fips

Package

Name
opentofu-fips
Purl
pkg:apk/cleanstart/opentofu-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.10-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
opentofu-fips

Package

Name
opentofu-fips
Purl
pkg:apk/cleanstart/opentofu-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.11-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"
jitsucom-bulker

Package

Name
jitsucom-bulker
Purl
pkg:apk/cleanstart/jitsucom-bulker

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.10.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IG41363.json"