Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
druid-exporter-fips could let attackers bypass security
published 7 months ago
Summary
The druid-exporter-fips component has several weaknesses that could let an attacker gain unauthorized access or interfere with its operation. Updating to the latest version (0.12 or newer) resolves these problems. Apply the vendor's security patches as soon as possible to protect your systems.
What to do
- Update cleanstart druid-exporter-fips to version 0.11-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | druid-exporter-fips |
< 0.11-r4 Fix: upgrade to 0.11-r4
|
Original advisory text
Security fixes for CVE-2022-29526, CVE-2025-47907, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-4f99-4q7p-p3gh applied in versions: 0.10-r0, 0.11-r0, 0.11-r2, 0.11-r3, 0.11-r4
Multiple security vulnerabilities affect the druid-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2022-29526 URL
- https://osv.dev/vulnerability/CVE-2025-47907 URL
- https://osv.dev/vulnerability/CVE-2025-58183 URL
- https://osv.dev/vulnerability/CVE-2025-58185 URL
- https://osv.dev/vulnerability/CVE-2025-58187 URL
- https://osv.dev/vulnerability/CVE-2025-58188 URL
- https://osv.dev/vulnerability/CVE-2025-58189 URL
- https://osv.dev/vulnerability/CVE-2025-61723 URL
- https://osv.dev/vulnerability/CVE-2025-61724 URL
- https://osv.dev/vulnerability/CVE-2025-61725 URL
- https://osv.dev/vulnerability/CVE-2025-61726 URL
- https://osv.dev/vulnerability/CVE-2025-61727 URL
- https://osv.dev/vulnerability/CVE-2025-61728 URL
- https://osv.dev/vulnerability/CVE-2025-61729 URL
- https://osv.dev/vulnerability/CVE-2025-61730 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-24515 URL
- https://osv.dev/vulnerability/CVE-2026-25210 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/ghsa-4f99-4q7p-p3gh URL
- https://nvd.nist.gov/vuln/detail/CVE-2022-29526 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-47907 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58183 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58185 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58187 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58188 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58189 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61723 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61724 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61725 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61726 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61727 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61728 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61730 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24515 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25210 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-NV78596 · OSV
Track software like this
Free during beta