Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
Vault, Grafana, Tigera‑Operator, OpenTelemetry risk code execution
published 15 days ago
Summary
Several of the listed products contained security weaknesses that could allow an attacker to run unwanted code on your systems. The problem has been corrected in newer releases of each component. Apply the updated versions as soon as possible to keep your environment protected.
What to do
- Update cleanstart vault to version 2.0.2-r0.
- Update cleanstart tigera-operator to version 1.42.4-r0.
- Update cleanstart grafana to version 13.1.0-r3.
- Update cleanstart opentelemetry-collector-contrib to version 0.152.0-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | vault |
< 2.0.2-r0 Fix: upgrade to 2.0.2-r0
|
| CleanStart | cleanstart | tigera-operator |
< 1.42.4-r0 Fix: upgrade to 1.42.4-r0
|
| CleanStart | cleanstart | grafana |
< 13.1.0-r3 Fix: upgrade to 13.1.0-r3
|
| CleanStart | cleanstart | opentelemetry-collector-contrib |
< 0.152.0-r1 Fix: upgrade to 0.152.0-r1
|
Original advisory text
Security fix for GHSA-hrxh-6v49-42gf applied in: tigera-operator 1.42.4-r0, grafana 13.1.0-r3, vault 2.0.2-r0, opentelemetry-collector-contrib 0.152.0-r1
GHSA-hrxh-6v49-42gf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published21 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLEANSTART-2026-RD27421 · OSV
Track software like this
Free during beta