CLEANSTART-2026-UK91932

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UK91932.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-UK91932
Upstream
Published
2026-10-30T13:00:03Z
Modified
2026-10-31T01:00:52Z
Severity
  • 5.9 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator
Summary
Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes
Details

CVE-2026-32637 affects multiple packages. Velero is an open source tool for backing up, restoring, and migrating Kubernetes cluster resources and persistent volumes. See references for individual vulnerability details.

References

Affected packages

CleanStart / velero-plugin-for-aws

Package

Name
velero-plugin-for-aws
Purl
pkg:apk/cleanstart/velero-plugin-for-aws

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.14.2-r2

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UK91932.json"

CleanStart / velero-plugin-for-csi

Package

Name
velero-plugin-for-csi
Purl
pkg:apk/cleanstart/velero-plugin-for-csi

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.7.1-r7

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UK91932.json"