CLEANSTART-2026-TL07792

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-TL07792

Upstream

CVE-2026-27141

Published

2026-09-18T10:28:13Z

Modified

2026-09-18T11:47:29Z

Summary

Security fix for CVE-2026-27141 applied in: argo-workflows 3.7.10-r2, argo-workflows-fips 3.6.18 r0, argo-workflows-fips 3.6.19-r0, argo-workflows-fips 3.7.10-r1, argo-workflows-fips 3.7.8-r2, aws-efs-csi-driver 2.2.0-r1, cert-manager-fips 1.19.2-r0, cert-manager-webhook-pdns-fips 2.5.5-r1, dynamic-localpv-provisioner 4.4.0-r3, external-dns 0.18.0-r1, fluent-operator-fips 3.6.0-r3, gitea-fips 1.25.5-r0, gitlab-runner 18.11.1-r0, grafana-mimir-fips 2.17.10-r0, grafana-org-operator 1.13.0-r0, harbor 2.13.4-r2, harbor 2.14.2-r1, helm 3.20.0-r0, helm 4.1.1-r1, kubescape 3.0.47-r0, kyverno-policy-reporter-fips 3.7.3-r0, linkerd2 26.2.1-r0, local-static-provisioner 2.8.0-r2, prometheus-statsd-exporter 0.28.0-r1, smarter-device-manager-fips 1.20.12-r1, terragrunt-fips 0.99.4-r1, vertical-pod-autoscaler 1.5.1-r3, vertical-pod-autoscaler-fips 1.5.1-r2, whereabouts 0.9.2-r1

Details

CVE-2026-27141 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

argo-workflows

Package

Name: argo-workflows

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.7.10-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

argo-workflows-fips

Package

Name: argo-workflows-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6.18 r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

argo-workflows-fips

Package

Name: argo-workflows-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6.19-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

argo-workflows-fips

Package

Name: argo-workflows-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.7.10-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

argo-workflows-fips

Package

Name: argo-workflows-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.7.8-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

aws-efs-csi-driver

Package

Name: aws-efs-csi-driver

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.2.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

cert-manager-fips

Package

Name: cert-manager-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.19.2-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

cert-manager-webhook-pdns-fips

Package

Name: cert-manager-webhook-pdns-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.5.5-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

dynamic-localpv-provisioner

Package

Name: dynamic-localpv-provisioner

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.4.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

external-dns

Package

Name: external-dns

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.18.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

fluent-operator-fips

Package

Name: fluent-operator-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.6.0-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

gitea-fips

Package

Name: gitea-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.25.5-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

gitlab-runner

Package

Name: gitlab-runner

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

18.11.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

grafana-mimir-fips

Package

Name: grafana-mimir-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.17.10-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

grafana-org-operator

Package

Name: grafana-org-operator

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.13.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

harbor

Package

Name: harbor

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.13.4-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

harbor

Package

Name: harbor

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.14.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

helm

Package

Name: helm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.20.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

helm

Package

Name: helm

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

kubescape

Package

Name: kubescape

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.0.47-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

kyverno-policy-reporter-fips

Package

Name: kyverno-policy-reporter-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.7.3-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

linkerd2

Package

Name: linkerd2

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

26.2.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

local-static-provisioner

Package

Name: local-static-provisioner

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.8.0-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

prometheus-statsd-exporter

Package

Name: prometheus-statsd-exporter

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.28.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

smarter-device-manager-fips

Package

Name: smarter-device-manager-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.20.12-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

terragrunt-fips

Package

Name: terragrunt-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.99.4-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

vertical-pod-autoscaler

Package

Name: vertical-pod-autoscaler

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.1-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

vertical-pod-autoscaler-fips

Package

Name: vertical-pod-autoscaler-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.5.1-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"

whereabouts

Package

Name: whereabouts

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.9.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-TL07792.json"