CLEANSTART-2026-DM71829: Security fix for GO-2026-5932 applied in: nginx-prometheus-exporter-fips 1.2.0-r0, haproxy-ingress 0.14.12-r9, vault 1.21.4-r16, knative-serving 1.20.3-r7, loki 3.4.6-r3, loki 3.4.6-r4

Q: Which package releases include the security fix?

The fix is applied in nginx-prometheus-exporter-fips 1.2.0-r0, haproxy-ingress 0.14.12-r9, vault 1.21.4-r16, knative-serving 1.20.3-r7, and loki 3.4.6-r3 and 3.4.6-r4.

Q: How can I determine whether my deployment is affected?

Check whether your installed packages are among cleanstart/nginx-prometheus-exporter-fips, cleanstart/haproxy-ingress, cleanstart/vault, cleanstart/knative-serving, or cleanstart/loki, then compare their installed releases with the listed fixed releases. The provided data does not identify vulnerable version ranges or configuration-specific exposure.

Published Nov 7, 2026

Updated

GO-2026-5932 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Affected Software

5 affected componentsFixes available

cleanstart/nginx-prometheus-exporter-fips<1.2.0-r0

1.2.0-r0

cleanstart/haproxy-ingress<0.14.12-r9

0.14.12-r9

cleanstart/vault<1.21.4-r16

1.21.4-r16

cleanstart/knative-serving<1.20.3-r7

1.20.3-r7

cleanstart/loki<3.4.6-r3

3.4.6-r3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/nginx-prometheus-exporter-fips to a version that resolves this vulnerability.
Fixed in 1.2.0-r0
Upgrade
Upgrade cleanstart/haproxy-ingress to a version that resolves this vulnerability.
Fixed in 0.14.12-r9
Upgrade
Upgrade cleanstart/vault to a version that resolves this vulnerability.
Fixed in 1.21.4-r16
Upgrade
Upgrade cleanstart/knative-serving to a version that resolves this vulnerability.
Fixed in 1.20.3-r7
Upgrade
Upgrade cleanstart/loki to a version that resolves this vulnerability.
Fixed in 3.4.6-r3
Upgrade
Upgrade cleanstart/loki to a version that resolves this vulnerability.
Fixed in 3.4.6-r4
Upgrade
Upgrade nginx-prometheus-exporter-fips to a version that resolves this vulnerability.
Fixed in 1.2.0-r0
Upgrade
Upgrade haproxy-ingress to a version that resolves this vulnerability.
Fixed in 0.14.12-r9
Upgrade
Upgrade vault to a version that resolves this vulnerability.
Fixed in 1.21.4-r16
Upgrade
Upgrade knative-serving to a version that resolves this vulnerability.
Fixed in 1.20.3-r7
Upgrade
Upgrade loki to a version that resolves this vulnerability.
Fixed in 3.4.6-r3
Upgrade
Upgrade loki to a version that resolves this vulnerability.
Fixed in 3.4.6-r4

Event History

Nov 7, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

GO-2026-5932

Frequently Asked Questions

Which package releases include the security fix?

The fix is applied in nginx-prometheus-exporter-fips 1.2.0-r0, haproxy-ingress 0.14.12-r9, vault 1.21.4-r16, knative-serving 1.20.3-r7, and loki 3.4.6-r3 and 3.4.6-r4.

How can I determine whether my deployment is affected?

Check whether your installed packages are among cleanstart/nginx-prometheus-exporter-fips, cleanstart/haproxy-ingress, cleanstart/vault, cleanstart/knative-serving, or cleanstart/loki, then compare their installed releases with the listed fixed releases. The provided data does not identify vulnerable version ranges or configuration-specific exposure.

CLEANSTART-2026-DM71829: Security fix for GO-2026-5932 applied in: nginx-prometheus-exporter-fips 1.2.0-r0, haproxy-ingress 0.14.12-r9, vault 1.21.4-r16, knative-serving 1.20.3-r7, loki 3.4.6-r3, loki 3.4.6-r4

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which package releases include the security fix?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

Which package releases include the security fix?

How can I determine whether my deployment is affected?