CLEANSTART-2026-SG48140

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SG48140.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-SG48140

Upstream

CVE-2026-25680

CVE-2026-25681

CVE-2026-27136

CVE-2026-33997

CVE-2026-34040

CVE-2026-39821

CVE-2026-39827

CVE-2026-39830

CVE-2026-39831

CVE-2026-39832

CVE-2026-39833

CVE-2026-39834

CVE-2026-39835

CVE-2026-42502

CVE-2026-42506

CVE-2026-42508

CVE-2026-46595

CVE-2026-46597

CVE-2026-46598

CVE-2026-54174

ghsa-fpg8-7664-jc5q

ghsa-x744-4wpc-v9h2

Published

2026-08-13T12:10:09Z

Modified

2026-09-04T13:33:22Z

Summary

Security fixes in melange 0.56.1-r1

Details

Package melange version 0.56.1-r1 fixes 22 vulnerabilities: CVE-2026-34040, CVE-2026-33997, CVE-2026-54174, CVE-2026-39830, CVE-2026-39831...

References

https://github.com/chainguard-dev/melange

Affected packages

CleanStart / melange

Package

Name: melange

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.56.1-r1

Affected versions

0.*

0.56.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SG48140.json"