OSV - Open Source Vulnerabilities

CLEANSTART-2026-TK38210

CleanStart/druid-exporter-fips

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-SB25660

CleanStart/falcosidekick-fips

net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-TY78539

CleanStart/go-fips-1.24

ParseAddress function constructs domain-literal address components through repeated string concatenation

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-SW55801

CleanStart/stakater-reloader

Within HostnameError

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-YC48827

CleanStart/cert-manager-fips

Within HostnameError

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-UR80185

CleanStart/helm-fips

excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-TS42581

CleanStart/chartmuseum-fips

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-SY95837

CleanStart/chartmuseum-fips

Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

30 Jan

Fix available
Severity - 9.8 (Critical)

CLEANSTART-2026-YL27116

CleanStart/kubernetes

tar

30 Jan

Fix available
Severity - 9.8 (Critical)

SUSE-SU-2026:0308-1

SUSE:Linux Enterprise Module for Development Tools 15 SP7/go1.24-openssl
SUSE:Linux Enterprise Server 15 SP6-LTSS/go1.24-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP6/go1.24-openssl
openSUSE:Leap 15.6/go1.24-openssl

Security update for go1.24-openssl

28 Jan

Fix available

SUSE-SU-2026:0298-1

SUSE:Linux Enterprise Module for Development Tools 15 SP7/go1.25-openssl
SUSE:Linux Enterprise Server 15 SP6-LTSS/go1.25-openssl
SUSE:Linux Enterprise Server for SAP Applications 15 SP6/go1.25-openssl
openSUSE:Leap 15.6/go1.25-openssl

Security update for go1.25-openssl

26 Jan

Fix available

SUSE-SU-2026:0297-1

SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS/go1.25-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS/go1.25-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS/go1.25-openssl
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS/go1.25-openssl
SUSE:Linux Enterprise Server 15 SP4-LTSS/go1.25-openssl
... 3 more

Security update for go1.25-openssl

26 Jan

Fix available

CLEANSTART-2025-EU07511

CleanStart/vault-k8s

Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729 applied in versions: 1.7.0-r0, 1.7.1-r0

16 Jan

Fix available

ECHO-3355-af98-f0dc

Echo/golang-1.24

See record for full details

24 Nov 2025

Fix available

MINI-vv2h-g9w7-cx4m

MinimOS/datadog-agent-7
MinimOS/datadog-agent-7-core-integrations
MinimOS/datadog-agent-7-fakeintake
MinimOS/datadog-agent-7-jmx
MinimOS/datadog-agent-7-oci-compat
... 4 more

See record for full details

20 Nov 2025

Fix available

MINI-hg8h-3g54-5g8h

MinimOS/cuda-compat-12
MinimOS/cuda-cudart-12
MinimOS/cuda-ldconfig-12
MinimOS/cuda-nvrtc-12
MinimOS/cuda-nvtx-12
... 13 more

See record for full details

18 Nov 2025

No fix available