CLEANSTART-2026-IT15296

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-IT15296
Upstream
  • CVE-2026-97054
Published
2026-11-13T00:37:08Z
Modified
2026-11-13T00:45:03Z
Summary
For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in th...
Details

CVE-2026-97054 affects multiple packages. For HTTP/1 servers, when MaxBytesReader's limit is exceeded, "Connection: close" header is automatically set without synchronization, which might race with another header being set explicitly in the server handler. See references for individual vulnerability details.

References

Affected packages

CleanStart
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.22.1-r12

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.22.1-r12

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.23.0-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.23.0-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
kube-state-metrics

Package

Name
kube-state-metrics
Purl
pkg:apk/cleanstart/kube-state-metrics

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.17.0-r13

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-net-istio

Package

Name
knative-net-istio
Purl
pkg:apk/cleanstart/knative-net-istio?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-net-istio

Package

Name
knative-net-istio
Purl
pkg:apk/cleanstart/knative-net-istio?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.21.3-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.21.3-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
rundeck

Package

Name
rundeck
Purl
pkg:apk/cleanstart/rundeck

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.1.0-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
keda

Package

Name
keda
Purl
pkg:apk/cleanstart/keda

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.2-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
restic

Package

Name
restic
Purl
pkg:apk/cleanstart/restic

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.18.1-r14

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"
wait-for-port

Package

Name
wait-for-port
Purl
pkg:apk/cleanstart/wait-for-port

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.10-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-IT15296.json"