CLEANSTART-2026-MW42084

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-MW42084

Upstream

ghsa-vc5p-v9hr-52mj

Published

2026-09-18T10:30:26Z

Modified

2026-09-18T11:47:10Z

Summary

Security fix for ghsa-vc5p-v9hr-52mj applied in: kafka 4.0.1-r0, kafka 4.1.1-r0, kafka-fips 4.0.1-r0, kafka-fips 4.0.1-r1, kafka-fips 4.1.1-r0, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, logstash-fips 9.0.8-r3, logstash-fips 9.2.4-r1, schema-registry 7.7.7-r0, sonarqube 25.12.0.117093-r3, sonarqube 26.4.0.121862-r2, spark-sc213-jdk17-py311 4.1.1-r1, spark-sc213-jdk17-py314 4.1.1-r1

Details

ghsa-vc5p-v9hr-52mj affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

kafka

Package

Name: kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

kafka

Package

Name: kafka

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

kafka-fips

Package

Name: kafka-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

kafka-fips

Package

Name: kafka-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.0.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

kafka-fips

Package

Name: kafka-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

kserve-modelmesh

Package

Name: kserve-modelmesh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.10.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

kserve-modelmesh

Package

Name: kserve-modelmesh

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.12.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

logstash-fips

Package

Name: logstash-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.0.8-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

logstash-fips

Package

Name: logstash-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

9.2.4-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

schema-registry

Package

Name: schema-registry

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

7.7.7-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

sonarqube

Package

Name: sonarqube

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

25.12.0.117093-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

sonarqube

Package

Name: sonarqube

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

26.4.0.121862-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

spark-sc213-jdk17-py311

Package

Name: spark-sc213-jdk17-py311

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"

spark-sc213-jdk17-py314

Package

Name: spark-sc213-jdk17-py314

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MW42084.json"