CLEANSTART-2026-OT74671

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-OT74671
Upstream
  • CVE-2026-94439
Published
2026-10-30T10:56:30Z
Modified
2026-10-31T01:02:28Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the conne...
Details

CVE-2026-94439 affects multiple packages. When an HTTP server handler sends a 2xx response to an HTTP/1 CONNECT request and returns without hijacking the connection, the server improperly continues to read and serve requests from the connection. See references for individual vulnerability details.

References

Affected packages

CleanStart
stakater-reloader

Package

Name
stakater-reloader
Purl
pkg:apk/cleanstart/stakater-reloader

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
stakater-reloader

Package

Name
stakater-reloader
Purl
pkg:apk/cleanstart/stakater-reloader

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.0-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
kube-state-metrics

Package

Name
kube-state-metrics
Purl
pkg:apk/cleanstart/kube-state-metrics

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.0-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
gomplate

Package

Name
gomplate
Purl
pkg:apk/cleanstart/gomplate

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.3.3-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
loki

Package

Name
loki
Purl
pkg:apk/cleanstart/loki?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
loki

Package

Name
loki
Purl
pkg:apk/cleanstart/loki?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
loki

Package

Name
loki
Purl
pkg:apk/cleanstart/loki?arch=ppc64le

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
loki

Package

Name
loki
Purl
pkg:apk/cleanstart/loki?arch=loongarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.12-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
opa-fips

Package

Name
opa-fips
Purl
pkg:apk/cleanstart/opa-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.21.2-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
istio-pilot-discovery

Package

Name
istio-pilot-discovery
Purl
pkg:apk/cleanstart/istio-pilot-discovery

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.30.5-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
kedacore-http-add-on

Package

Name
kedacore-http-add-on
Purl
pkg:apk/cleanstart/kedacore-http-add-on

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.15.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
kedacore-http-add-on

Package

Name
kedacore-http-add-on
Purl
pkg:apk/cleanstart/kedacore-http-add-on

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.13.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
rclone

Package

Name
rclone
Purl
pkg:apk/cleanstart/rclone

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.71.2-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.22.1-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.22.1-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=x86_64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.23.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
knative-serving

Package

Name
knative-serving
Purl
pkg:apk/cleanstart/knative-serving?arch=aarch64

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.23.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
haproxy-ingress

Package

Name
haproxy-ingress
Purl
pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.15.4-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-mysqld-exporter

Package

Name
prometheus-mysqld-exporter
Purl
pkg:apk/cleanstart/prometheus-mysqld-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.17.2-r10

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-mysqld-exporter

Package

Name
prometheus-mysqld-exporter
Purl
pkg:apk/cleanstart/prometheus-mysqld-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.17.2-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-mysqld-exporter

Package

Name
prometheus-mysqld-exporter
Purl
pkg:apk/cleanstart/prometheus-mysqld-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.17.2-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus

Package

Name
prometheus
Purl
pkg:apk/cleanstart/prometheus

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-r10

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus

Package

Name
prometheus
Purl
pkg:apk/cleanstart/prometheus

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.5.3-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
keda

Package

Name
keda
Purl
pkg:apk/cleanstart/keda

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.20.2-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
yunikorn-k8shim

Package

Name
yunikorn-k8shim
Purl
pkg:apk/cleanstart/yunikorn-k8shim

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
keda

Package

Name
keda
Purl
pkg:apk/cleanstart/keda

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.17.2-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-operator

Package

Name
prometheus-operator
Purl
pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.90.1-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
renovate

Package

Name
renovate
Purl
pkg:apk/cleanstart/renovate

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
44.158.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-mysqld-exporter

Package

Name
prometheus-mysqld-exporter
Purl
pkg:apk/cleanstart/prometheus-mysqld-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.18.0-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-mysqld-exporter

Package

Name
prometheus-mysqld-exporter
Purl
pkg:apk/cleanstart/prometheus-mysqld-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.18.0-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-node-exporter-fips

Package

Name
prometheus-node-exporter-fips
Purl
pkg:apk/cleanstart/prometheus-node-exporter-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.2-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-statsd-exporter

Package

Name
prometheus-statsd-exporter
Purl
pkg:apk/cleanstart/prometheus-statsd-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.29.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-statsd-exporter

Package

Name
prometheus-statsd-exporter
Purl
pkg:apk/cleanstart/prometheus-statsd-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.29.0-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-alertmanager

Package

Name
prometheus-alertmanager
Purl
pkg:apk/cleanstart/prometheus-alertmanager

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.32.2-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-operator

Package

Name
prometheus-operator
Purl
pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.91.0-r10

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-operator

Package

Name
prometheus-operator
Purl
pkg:apk/cleanstart/prometheus-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.91.0-r9

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-statsd-exporter

Package

Name
prometheus-statsd-exporter
Purl
pkg:apk/cleanstart/prometheus-statsd-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.31.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-statsd-exporter

Package

Name
prometheus-statsd-exporter
Purl
pkg:apk/cleanstart/prometheus-statsd-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.30.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-mysqld-exporter

Package

Name
prometheus-mysqld-exporter
Purl
pkg:apk/cleanstart/prometheus-mysqld-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
istio-pilot-discovery

Package

Name
istio-pilot-discovery
Purl
pkg:apk/cleanstart/istio-pilot-discovery

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.29.8-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
istio-pilot-discovery

Package

Name
istio-pilot-discovery
Purl
pkg:apk/cleanstart/istio-pilot-discovery

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.30.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus

Package

Name
prometheus
Purl
pkg:apk/cleanstart/prometheus

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.12.0-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus

Package

Name
prometheus
Purl
pkg:apk/cleanstart/prometheus

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.12.0-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
argo-cd

Package

Name
argo-cd
Purl
pkg:apk/cleanstart/argo-cd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.2.12-r10

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
cert-manager

Package

Name
cert-manager
Purl
pkg:apk/cleanstart/cert-manager

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.19.6-r5

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
dex

Package

Name
dex
Purl
pkg:apk/cleanstart/dex

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.42.1-r7

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
restic-fips

Package

Name
restic-fips
Purl
pkg:apk/cleanstart/restic-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.18.1-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
nfs-subdir-external-provisioner

Package

Name
nfs-subdir-external-provisioner
Purl
pkg:apk/cleanstart/nfs-subdir-external-provisioner

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.18-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
nfs-subdir-external-provisioner

Package

Name
nfs-subdir-external-provisioner
Purl
pkg:apk/cleanstart/nfs-subdir-external-provisioner

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.0.18-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
prometheus-node-exporter

Package

Name
prometheus-node-exporter
Purl
pkg:apk/cleanstart/prometheus-node-exporter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.2-r6

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
wave

Package

Name
wave
Purl
pkg:apk/cleanstart/wave

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.12.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"
weaviate-fips

Package

Name
weaviate-fips
Purl
pkg:apk/cleanstart/weaviate-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.38.20-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-OT74671.json"