CLEANSTART-2026-CY10128: Security fix for GO-2026-5932 applied in: velero 1.17.2-r15, gitea 1.27.3-r3, minio 0.20250907.161309-r9, velero 1.16.2-r19, velero 1.15.2-r15, opentelemetry-collector-contrib 0.163.0-r1, keda 2.20.2-r5

Affected Software

Remediation

Recommended actions to resolve this vulnerability, in priority order.

1. Upgrade

   Upgrade cleanstart/velero to a version that resolves this vulnerability.

   Fixed in 1.17.2-r15
2. Upgrade

   Upgrade cleanstart/gitea to a version that resolves this vulnerability.

   Fixed in 1.27.3-r3
3. Upgrade

   Upgrade cleanstart/minio to a version that resolves this vulnerability.

   Fixed in 0.20250907.161309-r9
4. Upgrade

   Upgrade cleanstart/velero to a version that resolves this vulnerability.

   Fixed in 1.16.2-r19
5. Upgrade

   Upgrade cleanstart/velero to a version that resolves this vulnerability.

   Fixed in 1.15.2-r15
6. Upgrade

   Upgrade cleanstart/opentelemetry-collector-contrib to a version that resolves this vulnerability.

   Fixed in 0.163.0-r1
7. Upgrade

   Upgrade cleanstart/keda to a version that resolves this vulnerability.

   Fixed in 2.20.2-r5
8. Upgrade

   Upgrade velero to a version that resolves this vulnerability.

   Fixed in 1.17.2-r15
9. Upgrade

   Upgrade gitea to a version that resolves this vulnerability.

   Fixed in 1.27.3-r3
10. Upgrade

    Upgrade minio to a version that resolves this vulnerability.

    Fixed in 0.20250907.161309-r9
11. Upgrade

    Upgrade velero to a version that resolves this vulnerability.

    Fixed in 1.16.2-r19
12. Upgrade

    Upgrade velero to a version that resolves this vulnerability.

    Fixed in 1.15.2-r15
13. Upgrade

    Upgrade opentelemetry-collector-contrib to a version that resolves this vulnerability.

    Fixed in 0.163.0-r1
14. Upgrade

    Upgrade keda to a version that resolves this vulnerability.

    Fixed in 2.20.2-r5

Event History

Child vulnerabilities

Contains the following vulnerabilities.

• GO-2026-5932