CLEANSTART-2026-YY23230

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-YY23230
Upstream
  • ghsa-4f99-4q7p-p3gh
Published
2026-09-18T10:30:33Z
Modified
2026-10-09T07:47:42Z
Severity
  • 8.7 (High) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N CVSS Calculator
Summary
Security fix for ghsa-4f99-4q7p-p3gh applied in: aws-flb-cloudwatch 1.9.4-r0, aws-flb-firehose 1.7.2-r0, aws-flb-kinesis 1.10.3-r0, consul-fips 1.21.5-r0, druid-exporter-fips 0.10-r1, druid-exporter-fips 0.11-r2, kube-fluentd-operator 1.18.2-r0, paranoia 0.2.1-r0, runc 1.1.14-r0, wavefront-collector-for-kubernetes 1.13.0-r0
Details

ghsa-4f99-4q7p-p3gh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

CleanStart
aws-flb-cloudwatch

Package

Name
aws-flb-cloudwatch
Purl
pkg:apk/cleanstart/aws-flb-cloudwatch

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.9.4-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
aws-flb-firehose

Package

Name
aws-flb-firehose
Purl
pkg:apk/cleanstart/aws-flb-firehose

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.7.2-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
aws-flb-kinesis

Package

Name
aws-flb-kinesis
Purl
pkg:apk/cleanstart/aws-flb-kinesis

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.10.3-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
consul-fips

Package

Name
consul-fips
Purl
pkg:apk/cleanstart/consul-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.21.5-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
druid-exporter-fips

Package

Name
druid-exporter-fips
Purl
pkg:apk/cleanstart/druid-exporter-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.10-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
druid-exporter-fips

Package

Name
druid-exporter-fips
Purl
pkg:apk/cleanstart/druid-exporter-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.11-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
kube-fluentd-operator

Package

Name
kube-fluentd-operator
Purl
pkg:apk/cleanstart/kube-fluentd-operator

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.18.2-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
paranoia

Package

Name
paranoia
Purl
pkg:apk/cleanstart/paranoia

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.2.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
runc

Package

Name
runc
Purl
pkg:apk/cleanstart/runc

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.1.14-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"
wavefront-collector-for-kubernetes

Package

Name
wavefront-collector-for-kubernetes
Purl
pkg:apk/cleanstart/wavefront-collector-for-kubernetes

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.13.0-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-YY23230.json"