CLEANSTART-2026-WV75757

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-WV75757.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-WV75757
Upstream
Published
2026-10-30T11:04:15Z
Modified
2026-10-31T01:02:25Z
Severity
  • 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
Apache CXF stores large stream based messages as temporary files on the local filesystem
Details

Security vulnerability affects the wso2is package. Apache CXF stores large stream based messages as temporary files on the local filesystem.

References

Affected packages

CleanStart / wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.1.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-WV75757.json"

CleanStart / wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-WV75757.json"

CleanStart / wso2is

Package

Name
wso2is
Purl
pkg:apk/cleanstart/wso2is

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
7.0.0-r1

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-WV75757.json"