CLEANSTART-2026-YI67273

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-YI67273

Upstream

CVE-2026-34040

Published

2026-09-18T10:23:44Z

Modified

2026-10-09T07:47:42Z

Severity

7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Summary

Security fix for CVE-2026-34040 applied in: amazon-cloudwatch-agent 1.300070.0-r1, amazon-cloudwatch-agent 1.300071.0-r1, amazon-cloudwatch-agent-fips 1.300069.0-r1, cadvisor-fips 0.55.1-r0, docker-compose 5.1.0-r0, gitlab-runner 18.11.1-r0, grafana-alloy 1.14.2-r2, grafana-alloy 1.15.0-r0, grafana-alloy 1.15.1-r1, grafana-alloy-fips 1.14.2.r0, grafana-alloy-fips 1.15.0-r0, grafana-alloy-fips 1.15.1-r0, harbor-trivy-adapter-fips 0.36.0-r1, k8ssandra-client-fips 0.6.4-r7, k8ssandra-client-fips 0.7.0-r5, kubevela 1.10.8-r0, melange 0.45.4-r0, melange 0.46.1-r0, melange 0.47.0-r0, melange 0.55.0-r1, melange 0.56.1-r1, paranoia 0.2.1-r0, prometheus-fips 3.10.0-r2, prometheus-fips 3.11.3-r2, promxy 0.0.93-r1, pulumi 3.299.0-r0, rancher-agent 2.11.15-r1, spire-server-fips 1.15.1-r1, tkn 0.42.2-r1, tkn 0.43.2-r1, tkn 0.44.2-r1, tkn 0.45.0-r1, tkn-fips 0.44.2-r0, vault 1.21.4-r1

Details

CVE-2026-34040 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart

amazon-cloudwatch-agent

Package

Name: amazon-cloudwatch-agent
Purl: pkg:apk/cleanstart/amazon-cloudwatch-agent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.300070.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

amazon-cloudwatch-agent

Package

Name: amazon-cloudwatch-agent
Purl: pkg:apk/cleanstart/amazon-cloudwatch-agent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.300071.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

amazon-cloudwatch-agent-fips

Package

Name: amazon-cloudwatch-agent-fips
Purl: pkg:apk/cleanstart/amazon-cloudwatch-agent-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.300069.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

cadvisor-fips

Package

Name: cadvisor-fips
Purl: pkg:apk/cleanstart/cadvisor-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.55.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

docker-compose

Package

Name: docker-compose
Purl: pkg:apk/cleanstart/docker-compose

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

5.1.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

gitlab-runner

Package

Name: gitlab-runner
Purl: pkg:apk/cleanstart/gitlab-runner

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

18.11.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

grafana-alloy

Package

Name: grafana-alloy
Purl: pkg:apk/cleanstart/grafana-alloy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.14.2-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

grafana-alloy

Package

Name: grafana-alloy
Purl: pkg:apk/cleanstart/grafana-alloy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.15.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

grafana-alloy

Package

Name: grafana-alloy
Purl: pkg:apk/cleanstart/grafana-alloy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.15.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

grafana-alloy-fips

Package

Name: grafana-alloy-fips
Purl: pkg:apk/cleanstart/grafana-alloy-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.14.2.r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

grafana-alloy-fips

Package

Name: grafana-alloy-fips
Purl: pkg:apk/cleanstart/grafana-alloy-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.15.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

grafana-alloy-fips

Package

Name: grafana-alloy-fips
Purl: pkg:apk/cleanstart/grafana-alloy-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.15.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

harbor-trivy-adapter-fips

Package

Name: harbor-trivy-adapter-fips
Purl: pkg:apk/cleanstart/harbor-trivy-adapter-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.36.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

k8ssandra-client-fips

Package

Name: k8ssandra-client-fips
Purl: pkg:apk/cleanstart/k8ssandra-client-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.6.4-r7

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

k8ssandra-client-fips

Package

Name: k8ssandra-client-fips
Purl: pkg:apk/cleanstart/k8ssandra-client-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.7.0-r5

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

kubevela

Package

Name: kubevela
Purl: pkg:apk/cleanstart/kubevela

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.10.8-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

melange

Package

Name: melange
Purl: pkg:apk/cleanstart/melange

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.45.4-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

melange

Package

Name: melange
Purl: pkg:apk/cleanstart/melange

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.46.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

melange

Package

Name: melange
Purl: pkg:apk/cleanstart/melange

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.47.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

melange

Package

Name: melange
Purl: pkg:apk/cleanstart/melange

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.55.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

melange

Package

Name: melange
Purl: pkg:apk/cleanstart/melange

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.56.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

paranoia

Package

Name: paranoia
Purl: pkg:apk/cleanstart/paranoia

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.2.1-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

prometheus-fips

Package

Name: prometheus-fips
Purl: pkg:apk/cleanstart/prometheus-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.10.0-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

prometheus-fips

Package

Name: prometheus-fips
Purl: pkg:apk/cleanstart/prometheus-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.11.3-r2

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

promxy

Package

Name: promxy
Purl: pkg:apk/cleanstart/promxy

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.0.93-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

pulumi

Package

Name: pulumi
Purl: pkg:apk/cleanstart/pulumi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.299.0-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

rancher-agent

Package

Name: rancher-agent
Purl: pkg:apk/cleanstart/rancher-agent

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

2.11.15-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

spire-server-fips

Package

Name: spire-server-fips
Purl: pkg:apk/cleanstart/spire-server-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.15.1-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

tkn

Package

Name: tkn
Purl: pkg:apk/cleanstart/tkn

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.42.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

tkn

Package

Name: tkn
Purl: pkg:apk/cleanstart/tkn

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.43.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

tkn

Package

Name: tkn
Purl: pkg:apk/cleanstart/tkn

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.44.2-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

tkn

Package

Name: tkn
Purl: pkg:apk/cleanstart/tkn

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.45.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

tkn-fips

Package

Name: tkn-fips
Purl: pkg:apk/cleanstart/tkn-fips

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.44.2-r0

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"

vault

Package

Name: vault
Purl: pkg:apk/cleanstart/vault

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

1.21.4-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YI67273.json"