CLEANSTART-2026-IL87436

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-IL87436

Upstream

ghsa-x527-x647-q7gg

Published

2026-09-18T09:52:59Z

Modified

2026-10-09T07:46:55Z

Severity

10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L CVSS Calculator

Summary

Security fix for ghsa-x527-x647-q7gg applied in: cfssl 1.5.0-r1, consul-fips 2.0.1-r1, crossplane-provider-sql-fips 0.15.0-r3, distribution 3.1.1-r1, grafana-agent-operator 0.44.3-r1, postgres-operator 1.12.2-r2, temporal-ui-server-fips 2.51.1-r1

Details

ghsa-x527-x647-q7gg affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

cfssl

Package

Name: cfssl
Purl: pkg:apk/cleanstart/cfssl

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"

consul-fips

Package

Name: consul-fips
Purl: pkg:apk/cleanstart/consul-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.0.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"

crossplane-provider-sql-fips

Package

Name: crossplane-provider-sql-fips
Purl: pkg:apk/cleanstart/crossplane-provider-sql-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.15.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"

distribution

Package

Name: distribution
Purl: pkg:apk/cleanstart/distribution

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.1.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"

grafana-agent-operator

Package

Name: grafana-agent-operator
Purl: pkg:apk/cleanstart/grafana-agent-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.44.3-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"

postgres-operator

Package

Name: postgres-operator
Purl: pkg:apk/cleanstart/postgres-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.12.2-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"

temporal-ui-server-fips

Package

Name: temporal-ui-server-fips
Purl: pkg:apk/cleanstart/temporal-ui-server-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.51.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IL87436.json"