Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.3

Jitsu, OpenSearch Dashboards, Renovate update fixes security risk

published 1 month ago
Summary

The Jitsu, OpenSearch Dashboards (FIPS) and Renovate software packages have been updated to address a security weakness that could allow attackers to exploit the system. The problem is resolved in the newer versions listed, so users should upgrade to those releases as soon as possible to stay protected.

What to do
  • Update cleanstart jitsucom-jitsu to version 2.11.0-r2.
  • Update cleanstart opensearch-dashboards-fips to version 3.5.0-r1.
  • Update cleanstart renovate to version 43.4.3-r1.
  • Update cleanstart renovate to version 43.4.4-r0.
  • Update jitsucom-jitsu to version 2.11.0-r2.
  • Update opensearch-dashboards-fips to version 3.5.0-r1.
  • Update renovate to version 43.4.3-r1.
  • Update renovate to version 43.4.4-r0.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart jitsucom-jitsu < 2.11.0-r2
Fix: upgrade to 2.11.0-r2
CleanStart cleanstart opensearch-dashboards-fips < 3.5.0-r1
Fix: upgrade to 3.5.0-r1
CleanStart cleanstart renovate < 43.4.3-r1
< 43.4.4-r0
Fix: upgrade to 43.4.3-r1
CleanStart – jitsucom-jitsu < 2.11.0-r2
Fix: upgrade to 2.11.0-r2
CleanStart – opensearch-dashboards-fips < 3.5.0-r1
Fix: upgrade to 3.5.0-r1
CleanStart – renovate < 43.4.3-r1
< 43.4.4-r0
Fix: upgrade to 43.4.3-r1
Original advisory text
Security fix for GHSA-m7jm-9gc2-mpf2 applied in: jitsucom-jitsu 2.11.0-r2, opensearch-dashboards-fips 3.5.0-r1, renovate 43.4.3-r1, renovate 43.4.4-r0
GHSA-m7jm-9gc2-mpf2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
References
Severity
9.3 Critical
Timeline
Published18 Sep 2026
Updated15 Oct 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-GZ45856 · OSV
Track software like this
Free during beta