CLEANSTART-2026-JE43065

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-JE43065
Upstream
  • ghsa-4vq8-7jfc-9cvp
Published
2026-09-18T10:32:49Z
Modified
2026-10-09T07:47:01Z
Severity
  • 3.3 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Security fix for ghsa-4vq8-7jfc-9cvp applied in: cert-manager-cmctl-fips 2.1.1-r0, elastic-beats 8.18.1-r0, elastic-beats 9.2.8-r0, elastic-beats 9.3.3-r0, falcoctl 0.11.0-r0, gitness 3.3.0-r1, harbor-fips 2.10.3-r0, kyverno-fips 1.12.7-r0, kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r4, paranoia 0.2.1-r0, skaffold 2.16.1-r1
Details

ghsa-4vq8-7jfc-9cvp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart
cert-manager-cmctl-fips

Package

Name
cert-manager-cmctl-fips
Purl
pkg:apk/cleanstart/cert-manager-cmctl-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.1.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
elastic-beats

Package

Name
elastic-beats
Purl
pkg:apk/cleanstart/elastic-beats

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.18.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
elastic-beats

Package

Name
elastic-beats
Purl
pkg:apk/cleanstart/elastic-beats

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.8-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
elastic-beats

Package

Name
elastic-beats
Purl
pkg:apk/cleanstart/elastic-beats

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.3.3-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
falcoctl

Package

Name
falcoctl
Purl
pkg:apk/cleanstart/falcoctl

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.11.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
gitness

Package

Name
gitness
Purl
pkg:apk/cleanstart/gitness

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.3.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
harbor-fips

Package

Name
harbor-fips
Purl
pkg:apk/cleanstart/harbor-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.10.3-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
kyverno-fips

Package

Name
kyverno-fips
Purl
pkg:apk/cleanstart/kyverno-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.12.7-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
kyverno-policy-reporter-kyverno-plugin-fips

Package

Name
kyverno-policy-reporter-kyverno-plugin-fips
Purl
pkg:apk/cleanstart/kyverno-policy-reporter-kyverno-plugin-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.4.2-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
paranoia

Package

Name
paranoia
Purl
pkg:apk/cleanstart/paranoia

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.2.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"
skaffold

Package

Name
skaffold
Purl
pkg:apk/cleanstart/skaffold

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.16.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JE43065.json"