CLEANSTART-2026-MM99608

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-MM99608

Upstream

ghsa-rmj7-2vxq-3g9f

Published

2026-09-18T09:55:57Z

Modified

2026-09-18T11:46:52Z

Summary

Security fix for ghsa-rmj7-2vxq-3g9f applied in: cassandra 5.0.8-r1, confluent-kafka 8.3.0-r1, hazelcast 5.7.0-r1, kafka 4.3.1-r1, keycloak 26.4.7-r4, keycloak 26.6.4-r1, keycloak 26.7.0-r1, kserve-modelmesh 0.12.0-r17, logstash-fips 9.4.3-r1, s3proxy 3.3.0-r1, spark 3.5.9-r1, spark-sc213-jdk17-py312 3.4.4-r1, strimzi-kafka-operator 1.1.0-r1

Details

ghsa-rmj7-2vxq-3g9f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

cassandra

Package

Name: cassandra

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.0.8-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

confluent-kafka

Package

Name: confluent-kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

8.3.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

hazelcast

Package

Name: hazelcast

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.7.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

kafka

Package

Name: kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.3.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

keycloak

Package

Name: keycloak

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

26.4.7-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

keycloak

Package

Name: keycloak

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

26.6.4-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

keycloak

Package

Name: keycloak

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

26.7.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

kserve-modelmesh

Package

Name: kserve-modelmesh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.12.0-r17

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

logstash-fips

Package

Name: logstash-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.4.3-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

s3proxy

Package

Name: s3proxy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.3.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

spark

Package

Name: spark

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.5.9-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

spark-sc213-jdk17-py312

Package

Name: spark-sc213-jdk17-py312

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.4.4-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"

strimzi-kafka-operator

Package

Name: strimzi-kafka-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.1.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MM99608.json"