(CVE-2026-42507)
Vulnerability from cleanstart – Published: 2026-09-18 10:06 – Updated: 2026-10-09 07:07 – Source website
VLAI
Summary
Security fix for CVE-2026-42507 applied in: apache-nifi 2.10.0-r4, apko 1.2.2-r2, argo-cd 3.2.7-r4, argo-cd 3.3.5-r3, argo-workflows 4.0.5-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-load-balancer-controller 3.2.0-r0, aws-network-policy-agent 1.3.2-r1, aws-network-policy-agent-fips 1.3.2-r0, cadvisor 0.57.0-r0, calico 3.30.7-r3, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, crossplane-provider-keycloak-fips 2.22.1-r1, dex 2.43.1-r5, dex 2.44.0-r4, dex 2.45.1-r4, elastic-beats 8.19.15-r6, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, flux-notification-controller-fips 1.5.0-r0, go-discover 0_git20250325-r1, gomplate 4.3.3-r1, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, helm 4.0.5-r2, helm-operator 1.42.2-r1, ingress-nginx-controller 1.14.5-r1, ingress-nginx-controller 1.15.1-r2, istio 1.28.5-r4, istio 1.29.2-r2, k8ssandra-operator 1.26.0-r0, kafka 4.3.0-r0, kube-state-metrics 2.15.0-r3, kube-vip 1.1.2-r2, kubernetes 1.34.1-r6, kubernetes 1.36.1-r1, kubernetes-csi-driver-nfs-fips 4.13.0-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-dns-node-cache 1.25.0-r5, kubewatch 2.12.0-r2, kustomize 5.7.1-r4, kustomize-fips 5.8.1-r0, kyverno 1.18.1-r0, kyverno 1.18.1-r1, libnvidia-container 1.19.0-r1, memcached-exporter 0.16.0-r1, metacontroller 4.12.13-r1, metacontroller 4.13.1-r1, metacontroller 4.14.0-r1, metacontroller 4.15.0-r1, minio 0.20260330.001845-r1, minio-operator 7.1.1-r5, mockgen 0.6.0-r1, mongodb 8.0.20-r2, mongodb 8.2.6-r2, mongodb 8.3.2-r1, mountpoint-s3-csi-driver 2.3.0-r1, nvidia-container-toolkit 1.18.2-r1, nvidia-container-toolkit 1.19.0-r1, ollama 0.20.3-r4, ollama-fips 0.18.3-r2, ollama-fips 0.21.0-r3, opentelemetry-collector-contrib 0.150.0-r1, opentofu-fips 1.12.1-r0, paranoia 0.5.0-r1, pmm 3.5.0-r0, policy-controller-fips 0.15.1-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r4, prometheus-node-exporter 1.11.0-r0, prometheus-node-exporter-fips 1.11.0-r0, prometheus-operator 0.69.1-r3, prometheus-operator 0.88.1-r1, prometheus-operator 0.89.0-r2, prometheus-operator 0.90.1-r1, prometheus-operator 0.91.0-r1, promxy-fips 0.0.93-r1, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.2-r0, runc 1.4.2-r1, sealed-secrets 0.34.0-r0, sealed-secrets 0.37.0-r0, spire-server 1.14.5-r1, step-issuer 0.10.2-r2, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, tigera-operator-fips 1.40.13-r1, trino 480-r2, trust-manager 0.22.1-r2, vault 1.20.4-r6, vault 1.21.4-r6, vault-csi-provider 1.7.0-r0, velero 1.18.1-r0, velero-plugin-for-aws 1.12.2-r6, velero-plugin-for-csi 0.7.1-r3, victoriametrics-operator-fips 0.68.5-r0, victoriametrics-vmauth 1.138.0-r0, wait-for-port 1.0.10-r5, whereabouts 0.9.2-r2
Details
CVE-2026-42507 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Severity
5.3 (Medium)
References
{
"affected": [
{
"package": {
"ecosystem": "CleanStart",
"name": "apache-nifi",
"purl": "pkg:apk/cleanstart/apache-nifi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.10.0-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "apko",
"purl": "pkg:apk/cleanstart/apko"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.2.2-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "argo-cd",
"purl": "pkg:apk/cleanstart/argo-cd"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.7-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "argo-cd",
"purl": "pkg:apk/cleanstart/argo-cd"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.3.5-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "argo-workflows",
"purl": "pkg:apk/cleanstart/argo-workflows"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.0.5-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "aws-eks-pod-identity-agent",
"purl": "pkg:apk/cleanstart/aws-eks-pod-identity-agent"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.36-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "aws-eks-pod-identity-agent-fips",
"purl": "pkg:apk/cleanstart/aws-eks-pod-identity-agent-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.1.36-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "aws-load-balancer-controller",
"purl": "pkg:apk/cleanstart/aws-load-balancer-controller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.2.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "aws-network-policy-agent",
"purl": "pkg:apk/cleanstart/aws-network-policy-agent"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.2-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "aws-network-policy-agent-fips",
"purl": "pkg:apk/cleanstart/aws-network-policy-agent-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.3.2-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "cadvisor",
"purl": "pkg:apk/cleanstart/cadvisor"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.57.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "calico",
"purl": "pkg:apk/cleanstart/calico"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.30.7-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "cert-manager",
"purl": "pkg:apk/cleanstart/cert-manager"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.17.4-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "cert-manager",
"purl": "pkg:apk/cleanstart/cert-manager"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.6-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "cert-manager",
"purl": "pkg:apk/cleanstart/cert-manager"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "crossplane-provider-keycloak-fips",
"purl": "pkg:apk/cleanstart/crossplane-provider-keycloak-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.22.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "dex",
"purl": "pkg:apk/cleanstart/dex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.43.1-r5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "dex",
"purl": "pkg:apk/cleanstart/dex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.44.0-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "dex",
"purl": "pkg:apk/cleanstart/dex"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.45.1-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "elastic-beats",
"purl": "pkg:apk/cleanstart/elastic-beats"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.19.15-r6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "elastic-beats",
"purl": "pkg:apk/cleanstart/elastic-beats"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.2.8-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "elastic-beats-fips",
"purl": "pkg:apk/cleanstart/elastic-beats-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "9.2.8-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "flux-notification-controller-fips",
"purl": "pkg:apk/cleanstart/flux-notification-controller-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.5.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "go-discover",
"purl": "pkg:apk/cleanstart/go-discover"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0_git20250325-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "gomplate",
"purl": "pkg:apk/cleanstart/gomplate"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.3.3-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "gostatsd",
"purl": "pkg:apk/cleanstart/gostatsd"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "28.3.0-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "gotenberg",
"purl": "pkg:apk/cleanstart/gotenberg"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.31.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "gotenberg",
"purl": "pkg:apk/cleanstart/gotenberg"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.32.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "helm",
"purl": "pkg:apk/cleanstart/helm"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.0.5-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "helm-operator",
"purl": "pkg:apk/cleanstart/helm-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.42.2-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "ingress-nginx-controller",
"purl": "pkg:apk/cleanstart/ingress-nginx-controller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.5-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "ingress-nginx-controller",
"purl": "pkg:apk/cleanstart/ingress-nginx-controller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.15.1-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "istio",
"purl": "pkg:apk/cleanstart/istio"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.28.5-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "istio",
"purl": "pkg:apk/cleanstart/istio"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.29.2-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "k8ssandra-operator",
"purl": "pkg:apk/cleanstart/k8ssandra-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.26.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kafka",
"purl": "pkg:apk/cleanstart/kafka"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.3.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kube-state-metrics",
"purl": "pkg:apk/cleanstart/kube-state-metrics"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.15.0-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kube-vip",
"purl": "pkg:apk/cleanstart/kube-vip"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.1.2-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kubernetes",
"purl": "pkg:apk/cleanstart/kubernetes"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.34.1-r6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kubernetes",
"purl": "pkg:apk/cleanstart/kubernetes"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.36.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kubernetes-csi-driver-nfs-fips",
"purl": "pkg:apk/cleanstart/kubernetes-csi-driver-nfs-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.13.0-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kubernetes-csi-external-resizer-fips",
"purl": "pkg:apk/cleanstart/kubernetes-csi-external-resizer-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.1.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kubernetes-dns-node-cache",
"purl": "pkg:apk/cleanstart/kubernetes-dns-node-cache"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.25.0-r5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kubewatch",
"purl": "pkg:apk/cleanstart/kubewatch"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.12.0-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kustomize",
"purl": "pkg:apk/cleanstart/kustomize"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.7.1-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kustomize-fips",
"purl": "pkg:apk/cleanstart/kustomize-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "5.8.1-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kyverno",
"purl": "pkg:apk/cleanstart/kyverno"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.1-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "kyverno",
"purl": "pkg:apk/cleanstart/kyverno"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "libnvidia-container",
"purl": "pkg:apk/cleanstart/libnvidia-container"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.19.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "memcached-exporter",
"purl": "pkg:apk/cleanstart/memcached-exporter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.16.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "metacontroller",
"purl": "pkg:apk/cleanstart/metacontroller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.12.13-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "metacontroller",
"purl": "pkg:apk/cleanstart/metacontroller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.13.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "metacontroller",
"purl": "pkg:apk/cleanstart/metacontroller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.14.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "metacontroller",
"purl": "pkg:apk/cleanstart/metacontroller"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "4.15.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "minio",
"purl": "pkg:apk/cleanstart/minio"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.20260330.001845-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "minio-operator",
"purl": "pkg:apk/cleanstart/minio-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "7.1.1-r5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "mockgen",
"purl": "pkg:apk/cleanstart/mockgen"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.6.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "mongodb",
"purl": "pkg:apk/cleanstart/mongodb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.0.20-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "mongodb",
"purl": "pkg:apk/cleanstart/mongodb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.2.6-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "mongodb",
"purl": "pkg:apk/cleanstart/mongodb"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "8.3.2-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "mountpoint-s3-csi-driver",
"purl": "pkg:apk/cleanstart/mountpoint-s3-csi-driver"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.3.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "nvidia-container-toolkit",
"purl": "pkg:apk/cleanstart/nvidia-container-toolkit"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.2-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "nvidia-container-toolkit",
"purl": "pkg:apk/cleanstart/nvidia-container-toolkit"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.19.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "ollama",
"purl": "pkg:apk/cleanstart/ollama?arch=x86_64"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.20.3-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "ollama-fips",
"purl": "pkg:apk/cleanstart/ollama-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.18.3-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "ollama-fips",
"purl": "pkg:apk/cleanstart/ollama-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.21.0-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "opentelemetry-collector-contrib",
"purl": "pkg:apk/cleanstart/opentelemetry-collector-contrib"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.150.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "opentofu-fips",
"purl": "pkg:apk/cleanstart/opentofu-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.1-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "paranoia",
"purl": "pkg:apk/cleanstart/paranoia"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.5.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "pmm",
"purl": "pkg:apk/cleanstart/pmm"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "3.5.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "policy-controller-fips",
"purl": "pkg:apk/cleanstart/policy-controller-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.15.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-blackbox-exporter",
"purl": "pkg:apk/cleanstart/prometheus-blackbox-exporter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.28.0-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-mysqld-exporter",
"purl": "pkg:apk/cleanstart/prometheus-mysqld-exporter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.15.0-r4"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-node-exporter",
"purl": "pkg:apk/cleanstart/prometheus-node-exporter"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.11.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-node-exporter-fips",
"purl": "pkg:apk/cleanstart/prometheus-node-exporter-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.11.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-operator",
"purl": "pkg:apk/cleanstart/prometheus-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.69.1-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-operator",
"purl": "pkg:apk/cleanstart/prometheus-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.88.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-operator",
"purl": "pkg:apk/cleanstart/prometheus-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.89.0-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-operator",
"purl": "pkg:apk/cleanstart/prometheus-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.90.1-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "prometheus-operator",
"purl": "pkg:apk/cleanstart/prometheus-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.91.0-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "promxy-fips",
"purl": "pkg:apk/cleanstart/promxy-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.0.93-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "rabbitmq-cluster-operator",
"purl": "pkg:apk/cleanstart/rabbitmq-cluster-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "2.18.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "rabbitmq-messaging-topology-operator",
"purl": "pkg:apk/cleanstart/rabbitmq-messaging-topology-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.16.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "rabbitmq-messaging-topology-operator",
"purl": "pkg:apk/cleanstart/rabbitmq-messaging-topology-operator"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.19.2-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "runc",
"purl": "pkg:apk/cleanstart/runc"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.4.2-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "sealed-secrets",
"purl": "pkg:apk/cleanstart/sealed-secrets"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.34.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "sealed-secrets",
"purl": "pkg:apk/cleanstart/sealed-secrets"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.37.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "spire-server",
"purl": "pkg:apk/cleanstart/spire-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.14.5-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "step-issuer",
"purl": "pkg:apk/cleanstart/step-issuer"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.10.2-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "step-issuer",
"purl": "pkg:apk/cleanstart/step-issuer"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.11-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "temporal",
"purl": "pkg:apk/cleanstart/temporal"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.5.1-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "temporal-server",
"purl": "pkg:apk/cleanstart/temporal-server"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.31.0.153.1-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "tigera-operator-fips",
"purl": "pkg:apk/cleanstart/tigera-operator-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.40.13-r1"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "trino",
"purl": "pkg:apk/cleanstart/trino"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "480-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "trust-manager",
"purl": "pkg:apk/cleanstart/trust-manager"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.22.1-r2"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "vault",
"purl": "pkg:apk/cleanstart/vault"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.20.4-r6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "vault",
"purl": "pkg:apk/cleanstart/vault"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.21.4-r6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "vault-csi-provider",
"purl": "pkg:apk/cleanstart/vault-csi-provider"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.7.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "velero",
"purl": "pkg:apk/cleanstart/velero"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.18.1-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "velero-plugin-for-aws",
"purl": "pkg:apk/cleanstart/velero-plugin-for-aws"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.12.2-r6"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "velero-plugin-for-csi",
"purl": "pkg:apk/cleanstart/velero-plugin-for-csi"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.7.1-r3"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "victoriametrics-operator-fips",
"purl": "pkg:apk/cleanstart/victoriametrics-operator-fips"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.68.5-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "victoriametrics-vmauth",
"purl": "pkg:apk/cleanstart/victoriametrics-vmauth"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.138.0-r0"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "wait-for-port",
"purl": "pkg:apk/cleanstart/wait-for-port"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "1.0.10-r5"
}
],
"type": "ECOSYSTEM"
}
]
},
{
"package": {
"ecosystem": "CleanStart",
"name": "whereabouts",
"purl": "pkg:apk/cleanstart/whereabouts"
},
"ranges": [
{
"events": [
{
"introduced": "0"
},
{
"fixed": "0.9.2-r2"
}
],
"type": "ECOSYSTEM"
}
]
}
],
"credits": [],
"database_specific": {},
"details": "CVE-2026-42507 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.",
"id": "CLEANSTART-2026-YY17130",
"modified": "2026-10-09T07:07:08Z",
"published": "2026-09-18T10:06:17.571443Z",
"references": [
{
"type": "ADVISORY",
"url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-YY17130.json"
},
{
"type": "WEB",
"url": "https://osv.dev/vulnerability/CVE-2026-42507"
},
{
"type": "WEB",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
}
],
"related": [],
"schema_version": "1.7.3",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"type": "CVSS_V3"
}
],
"summary": "Security fix for CVE-2026-42507 applied in: apache-nifi 2.10.0-r4, apko 1.2.2-r2, argo-cd 3.2.7-r4, argo-cd 3.3.5-r3, argo-workflows 4.0.5-r0, aws-eks-pod-identity-agent 0.1.36-r0, aws-eks-pod-identity-agent-fips 0.1.36-r0, aws-load-balancer-controller 3.2.0-r0, aws-network-policy-agent 1.3.2-r1, aws-network-policy-agent-fips 1.3.2-r0, cadvisor 0.57.0-r0, calico 3.30.7-r3, cert-manager 1.17.4-r2, cert-manager 1.18.6-r1, cert-manager 1.20.0-r0, crossplane-provider-keycloak-fips 2.22.1-r1, dex 2.43.1-r5, dex 2.44.0-r4, dex 2.45.1-r4, elastic-beats 8.19.15-r6, elastic-beats 9.2.8-r2, elastic-beats-fips 9.2.8-r0, flux-notification-controller-fips 1.5.0-r0, go-discover 0_git20250325-r1, gomplate 4.3.3-r1, gostatsd 28.3.0-r2, gotenberg 8.31.0-r0, gotenberg 8.32.0-r0, helm 4.0.5-r2, helm-operator 1.42.2-r1, ingress-nginx-controller 1.14.5-r1, ingress-nginx-controller 1.15.1-r2, istio 1.28.5-r4, istio 1.29.2-r2, k8ssandra-operator 1.26.0-r0, kafka 4.3.0-r0, kube-state-metrics 2.15.0-r3, kube-vip 1.1.2-r2, kubernetes 1.34.1-r6, kubernetes 1.36.1-r1, kubernetes-csi-driver-nfs-fips 4.13.0-r3, kubernetes-csi-external-resizer-fips 2.1.0-r1, kubernetes-dns-node-cache 1.25.0-r5, kubewatch 2.12.0-r2, kustomize 5.7.1-r4, kustomize-fips 5.8.1-r0, kyverno 1.18.1-r0, kyverno 1.18.1-r1, libnvidia-container 1.19.0-r1, memcached-exporter 0.16.0-r1, metacontroller 4.12.13-r1, metacontroller 4.13.1-r1, metacontroller 4.14.0-r1, metacontroller 4.15.0-r1, minio 0.20260330.001845-r1, minio-operator 7.1.1-r5, mockgen 0.6.0-r1, mongodb 8.0.20-r2, mongodb 8.2.6-r2, mongodb 8.3.2-r1, mountpoint-s3-csi-driver 2.3.0-r1, nvidia-container-toolkit 1.18.2-r1, nvidia-container-toolkit 1.19.0-r1, ollama 0.20.3-r4, ollama-fips 0.18.3-r2, ollama-fips 0.21.0-r3, opentelemetry-collector-contrib 0.150.0-r1, opentofu-fips 1.12.1-r0, paranoia 0.5.0-r1, pmm 3.5.0-r0, policy-controller-fips 0.15.1-r1, prometheus-blackbox-exporter 0.28.0-r2, prometheus-mysqld-exporter 0.15.0-r4, prometheus-node-exporter 1.11.0-r0, prometheus-node-exporter-fips 1.11.0-r0, prometheus-operator 0.69.1-r3, prometheus-operator 0.88.1-r1, prometheus-operator 0.89.0-r2, prometheus-operator 0.90.1-r1, prometheus-operator 0.91.0-r1, promxy-fips 0.0.93-r1, rabbitmq-cluster-operator 2.18.0-r0, rabbitmq-messaging-topology-operator 1.16.0-r0, rabbitmq-messaging-topology-operator 1.19.2-r0, runc 1.4.2-r1, sealed-secrets 0.34.0-r0, sealed-secrets 0.37.0-r0, spire-server 1.14.5-r1, step-issuer 0.10.2-r2, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.31.0.153.1-r0, tigera-operator-fips 1.40.13-r1, trino 480-r2, trust-manager 0.22.1-r2, vault 1.20.4-r6, vault 1.21.4-r6, vault-csi-provider 1.7.0-r0, velero 1.18.1-r0, velero-plugin-for-aws 1.12.2-r6, velero-plugin-for-csi 0.7.1-r3, victoriametrics-operator-fips 0.68.5-r0, victoriametrics-vmauth 1.138.0-r0, wait-for-port 1.0.10-r5, whereabouts 0.9.2-r2",
"upstream": [
"CVE-2026-42507"
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…