Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
prom-mysqld-exporter-fips could expose data to attackers
published 5 months ago
Summary
The prom-mysqld-exporter-fips component in versions 0.18.0-r0 through 0.18.0-r3 has several flaws that could let a malicious user access or alter information. Updating to a newer release fixes these problems. Apply the latest version as soon as possible to protect your systems.
What to do
- Update cleanstart prom-mysqld-exporter-fips to version 0.18.0-r3.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | prom-mysqld-exporter-fips |
< 0.18.0-r3 Fix: upgrade to 0.18.0-r3
|
Original advisory text
Security fixes for CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, ghsa-f6x5-jh6r-wrfv, ghsa-fw7p-63qq-7hpr, ghsa-j5w8-q4qc-rx2x applied in versions: 0.18.0-r0, 0.18.0-r1, 0.18.0-r2, 0.18.0-r3
Multiple security vulnerabilities affect the prom-mysqld-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-26958 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/CVE-2026-27143 URL
- https://osv.dev/vulnerability/CVE-2026-27144 URL
- https://osv.dev/vulnerability/CVE-2026-32280 URL
- https://osv.dev/vulnerability/CVE-2026-32281 URL
- https://osv.dev/vulnerability/CVE-2026-32282 URL
- https://osv.dev/vulnerability/CVE-2026-32283 URL
- https://osv.dev/vulnerability/CVE-2026-32289 URL
- https://osv.dev/vulnerability/CVE-2026-33810 URL
- https://osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv URL
- https://osv.dev/vulnerability/ghsa-fw7p-63qq-7hpr URL
- https://osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-26958 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27143 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27144 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32281 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32282 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32283 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-32289 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33810 URL
Timeline
Published18 May 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-BT04364 · OSV
Track software like this
Free during beta