Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.3
cleanstart NATS server and Falcosidekick may crash on connections
published 4 days ago
Summary
The cleanstart NATS messaging server, Falcosidekick tools, and related Go libraries can mishandle incoming network connections, which could cause them to stop working or let an attacker interfere with your services. This may disrupt the monitoring and communication functions your business depends on. Update to the latest versions released by cleanstart and restart the affected services as soon as possible.
What to do
- Update cleanstart nats-server-fips to version 2.9.25-r1.
- Update cleanstart falcosidekick to version 2.32.0-r0.
- Update cleanstart falcosidekick-fips to version 2.32.0-r0.
- Update cleanstart go-fips-1.24 to version 1.25.1-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nats-server-fips |
< 2.9.25-r1 Fix: upgrade to 2.9.25-r1
|
| CleanStart | cleanstart | falcosidekick |
< 2.32.0-r0 Fix: upgrade to 2.32.0-r0
|
| CleanStart | cleanstart | falcosidekick-fips |
< 2.32.0-r0 Fix: upgrade to 2.32.0-r0
|
| CleanStart | cleanstart | go-fips-1.24 |
< 1.25.1-r0 Fix: upgrade to 1.25.1-r0
|
Original advisory text
When Conn
CVE-2025-58189 affects multiple packages. When Conn. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-DW44819 · OSV
Track software like this
Free during beta