CLEANSTART-2026-JL30301

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-JL30301
Upstream
Published
2026-10-30T13:30:31Z
Modified
2026-10-31T06:15:03Z
Severity
  • 1.7 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U CVSS Calculator
Summary
Security fix for GHSA-fw7p-63qq-7hpr applied in: opentelemetry-collector-contrib 0.144.0-r1, gitea 1.25.5-r0, minio 0.20250907.161309-r0, temporal-server-fips 1.31.1-r1, fulcio 1.8.7-r2
Details

GHSA-fw7p-63qq-7hpr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart
opentelemetry-collector-contrib

Package

Name
opentelemetry-collector-contrib
Purl
pkg:apk/cleanstart/opentelemetry-collector-contrib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.144.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json"
gitea

Package

Name
gitea
Purl
pkg:apk/cleanstart/gitea?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.25.5-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json"
gitea

Package

Name
gitea
Purl
pkg:apk/cleanstart/gitea?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.25.5-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json"
minio

Package

Name
minio
Purl
pkg:apk/cleanstart/minio

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20250907.161309-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json"
temporal-server-fips

Package

Name
temporal-server-fips
Purl
pkg:apk/cleanstart/temporal-server-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.31.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json"
fulcio

Package

Name
fulcio
Purl
pkg:apk/cleanstart/fulcio

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.7-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JL30301.json"