CLEANSTART-2026-MO69766

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-MO69766
Upstream
Published
2026-09-18T09:53:33Z
Modified
2026-10-15T12:58:14Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Security fix for GHSA-r7wm-3cxj-wff9 applied in: activemq 6.2.8-r2, activemq 6.3.1-r1, akhq 0.27.1-r5, apache-hive 4.0.1-r8, apache-hive 4.1.0-r5, apache-nifi 2.10.0-r3, apache-zookeeper 3.8.6-r5, apache-zookeeper 3.9.5-r5, cass-config-builder-fips 1.0.21-r1, cassandra 5.0.8-r1, cassandra-reaper-fips 3.8.0-r9, cassandra-reaper-fips 4.0.2-r3, cassandra-reaper-fips 4.1.1-r2, cassandra-reaper-fips 4.2.5-r1, elasticsearch 9.1.10-r1, elasticsearch 9.2.8-r1, elasticsearch 9.4.4-r4, gradle 8.14.5-r1, hazelcast 5.7.0-r1, keycloak 26.4.13-r1, keycloak 26.4.7-r8, keycloak 26.6.4-r2, kserve-modelmesh 0.12.0-r17, logstash-fips 9.4.3-r1, solr 9.9.0-r1, spark 3.5.9-r2, strimzi-kafka-operator 1.1.0-r2, trino 480-r9, trino 483-r1, wildfly 41.0.0-r2, wso2is 7.0.0-r1, wso2is 7.1.0-r1, wso2is 7.2.0-r1, wso2is 7.3.0-r5
Details

GHSA-r7wm-3cxj-wff9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart
activemq

Package

Name
activemq
Purl
pkg:apk/cleanstart/activemq

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.2.8-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
activemq

Package

Name
activemq
Purl
pkg:apk/cleanstart/activemq

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.3.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
akhq

Package

Name
akhq
Purl
pkg:apk/cleanstart/akhq?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.27.1-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
apache-hive

Package

Name
apache-hive
Purl
pkg:apk/cleanstart/apache-hive

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.1-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
apache-hive

Package

Name
apache-hive
Purl
pkg:apk/cleanstart/apache-hive

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.0-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
apache-nifi

Package

Name
apache-nifi
Purl
pkg:apk/cleanstart/apache-nifi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.10.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
apache-zookeeper

Package

Name
apache-zookeeper
Purl
pkg:apk/cleanstart/apache-zookeeper?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.8.6-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
apache-zookeeper

Package

Name
apache-zookeeper
Purl
pkg:apk/cleanstart/apache-zookeeper?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.9.5-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
cass-config-builder-fips

Package

Name
cass-config-builder-fips
Purl
pkg:apk/cleanstart/cass-config-builder-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.21-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
cassandra

Package

Name
cassandra
Purl
pkg:apk/cleanstart/cassandra

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.0.8-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
cassandra-reaper-fips

Package

Name
cassandra-reaper-fips
Purl
pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.8.0-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
cassandra-reaper-fips

Package

Name
cassandra-reaper-fips
Purl
pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.2-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
cassandra-reaper-fips

Package

Name
cassandra-reaper-fips
Purl
pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.1-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
cassandra-reaper-fips

Package

Name
cassandra-reaper-fips
Purl
pkg:apk/cleanstart/cassandra-reaper-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.2.5-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
elasticsearch

Package

Name
elasticsearch
Purl
pkg:apk/cleanstart/elasticsearch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.1.10-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
elasticsearch

Package

Name
elasticsearch
Purl
pkg:apk/cleanstart/elasticsearch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.2.8-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
elasticsearch

Package

Name
elasticsearch
Purl
pkg:apk/cleanstart/elasticsearch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.4.4-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
gradle

Package

Name
gradle
Purl
pkg:apk/cleanstart/gradle?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.14.5-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
hazelcast

Package

Name
hazelcast
Purl
pkg:apk/cleanstart/hazelcast

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.7.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
keycloak

Package

Name
keycloak
Purl
pkg:apk/cleanstart/keycloak?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
26.4.13-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
keycloak

Package

Name
keycloak
Purl
pkg:apk/cleanstart/keycloak?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
26.4.7-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
keycloak

Package

Name
keycloak
Purl
pkg:apk/cleanstart/keycloak?arch=noarch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
26.6.4-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
kserve-modelmesh

Package

Name
kserve-modelmesh
Purl
pkg:apk/cleanstart/kserve-modelmesh

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.12.0-r17

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
logstash-fips

Package

Name
logstash-fips
Purl
pkg:apk/cleanstart/logstash-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.4.3-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
solr

Package

Name
solr
Purl
pkg:apk/cleanstart/solr

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
9.9.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
spark

Package

Name
spark
Purl
pkg:apk/cleanstart/spark

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.9-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
strimzi-kafka-operator

Package

Name
strimzi-kafka-operator
Purl
pkg:apk/cleanstart/strimzi-kafka-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
trino

Package

Name
trino
Purl
pkg:apk/cleanstart/trino

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
480-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
trino

Package

Name
trino
Purl
pkg:apk/cleanstart/trino

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
483-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
wildfly

Package

Name
wildfly
Purl
pkg:apk/cleanstart/wildfly

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
41.0.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.2.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"
wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.3.0-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MO69766.json"