Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
node-problem-detector could allow disruption of monitoring
published 7 months ago
Summary
The node‑problem‑detector component used in your environment has several weaknesses that could let an attacker interfere with its ability to report node issues. These flaws are fixed in newer releases (0.8.19‑r0, r1, r2). Upgrade to the latest version to keep monitoring reliable and protect against manipulation.
What to do
- Update cleanstart node-problem-detector to version 0.8.19-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | node-problem-detector |
< 0.8.19-r2 Fix: upgrade to 0.8.19-r2
|
Original advisory text
Security fixes for CVE-2025-68121, CVE-2026-25679, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, ghsa-6v2p-p543-phr9 applied in versions: 0.8.19-r0, 0.8.19-r1, 0.8.19-r2
Multiple security vulnerabilities affect the node-problem-detector package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-27137 URL
- https://osv.dev/vulnerability/CVE-2026-27138 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/ghsa-6v2p-p543-phr9 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27137 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27138 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-KR58137 · OSV
Track software like this
Free during beta