CLEANSTART-2026-YP35057

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YP35057.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-YP35057
Upstream
Published
2026-10-30T17:39:49Z
Modified
2026-10-31T06:15:29Z
Severity
  • 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
Summary
In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files
Details

Security vulnerability affects the gostatsd package. In Kubernetes, if the logging level is set to at least 9, authorization and bearer tokens will be written to log files.

References

Affected packages

CleanStart / gostatsd

Package

Name
gostatsd
Purl
pkg:apk/cleanstart/gostatsd

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
28.3.0-r0

Database specific

source
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YP35057.json"