Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
gatekeeper-fips may execute unauthorized code
published 16 days ago
Summary
The gatekeeper-fips component can be manipulated to run code that was not intended by the system. This could allow an attacker to perform actions on your servers that could compromise data or operations. Apply the latest updates from the vendor or replace the component with a patched version as soon as possible.
What to do
- Update cleanstart gatekeeper-fips to version 3.22.0-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | gatekeeper-fips |
< 3.22.0-r0 Fix: upgrade to 3.22.0-r0
|
Original advisory text
OpenTelemetry-Go is the Go implementation of OpenTelemetry
Security vulnerability affects the gatekeeper-fips package. OpenTelemetry-Go is the Go implementation of OpenTelemetry.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published20 Oct 2026
Updated21 Oct 2026
First seen21 Oct 2026
Sources
CLEANSTART-2026-MI18289 · OSV
Track software like this
Free during beta