Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
cass-operator may allow unauthorized actions
published 7 months ago
Summary
The cass-operator component can be exploited to perform actions it should not allow, potentially affecting your database operations. Updating to version 1.28.1‑r0 or later resolves these issues. Apply the latest release as soon as possible to keep your system secure.
What to do
- Update cleanstart cass-operator to version 1.28.1-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | cass-operator |
< 1.28.1-r1 Fix: upgrade to 1.28.1-r1
|
Original advisory text
Security fixes for CVE-2025-61732, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-9h8m-3fm2-qjrq, ghsa-p77j-4mvh-x3m3 applied in versions: 1.28.1-r0, 1.28.1-r1
Multiple security vulnerabilities affect the cass-operator package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-61732 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-24051 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/CVE-2026-33186 URL
- https://osv.dev/vulnerability/ghsa-9h8m-3fm2-qjrq URL
- https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61732 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-24051 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33186 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-CP95927 · OSV
Track software like this
Free during beta