Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
cleanstart packages may crash when handling HTTP requests
published 20 days ago
Summary
The cleanstart RabbitMQ topology operator, Restic, Velero, and Vault components have a flaw that can cause them to stop working when they receive certain HTTP traffic. This can interrupt backup, storage, or messaging services. Apply the latest updates from the vendors as soon as they are available to keep the services running smoothly.
What to do
- Update cleanstart rabbitmq-messaging-topology-operator to version 1.17.4-r3.
- Update cleanstart rabbitmq-messaging-topology-operator to version 1.18.3-r6.
- Update cleanstart rabbitmq-messaging-topology-operator to version 1.19.3-r9.
- Update cleanstart restic to version 0.18.1-r11.
- Update cleanstart velero to version 1.15.2-r12.
- Update cleanstart velero to version 1.17.2-r12.
- Update cleanstart vault to version 1.19.5-r8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | rabbitmq-messaging-topology-operator |
< 1.17.4-r3 < 1.18.3-r6 < 1.19.3-r9 Fix: upgrade to 1.17.4-r3
|
| CleanStart | cleanstart | restic |
< 0.18.1-r11 Fix: upgrade to 0.18.1-r11
|
| CleanStart | cleanstart | velero |
< 1.15.2-r12 < 1.17.2-r12 Fix: upgrade to 1.15.2-r12
|
| CleanStart | cleanstart | vault |
< 1.19.5-r8 Fix: upgrade to 1.19.5-r8
|
Original advisory text
When http
CVE-2026-56866 affects multiple packages. When http. See references for individual vulnerability details.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published16 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLEANSTART-2026-TV04834 · OSV
Track software like this
Free during beta