CLEANSTART-2026-JQ95608: Netty netty-tcnative before 2

Q: Which CleanStart package variants are identified as affected?

The affected package variants listed are cleanstart/wso2mi, cleanstart/elasticsearch, and cleanstart/spark-sc213-jdk17-py312.

Q: What version boundary is provided for the affected Netty component?

The available information identifies Netty netty-tcnative versions before 2. Individual vulnerability details are referenced separately.

Published Nov 7, 2026

Updated

CVE-2026-116542 affects multiple packages. Netty netty-tcnative before 2. See references for individual vulnerability details.

Affected Software

6 affected componentsFixes available

cleanstart/spark-sc213-jdk17-py312<4.2.0-r9

4.2.0-r9

cleanstart/wso2mi<4.3.0-r0

4.3.0-r0

cleanstart/wso2mi<4.4.0-r0

4.4.0-r0

cleanstart/wso2mi<4.5.0-r0

4.5.0-r0

cleanstart/elasticsearch<9.5.5-r2

9.5.5-r2

cleanstart/elasticsearch<9.5.5-r3

9.5.5-r3

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/spark-sc213-jdk17-py312 to a version that resolves this vulnerability.
Fixed in 4.2.0-r9
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.3.0-r0
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.4.0-r0
Upgrade
Upgrade cleanstart/wso2mi to a version that resolves this vulnerability.
Fixed in 4.5.0-r0
Upgrade
Upgrade cleanstart/elasticsearch to a version that resolves this vulnerability.
Fixed in 9.5.5-r2
Upgrade
Upgrade cleanstart/elasticsearch to a version that resolves this vulnerability.
Fixed in 9.5.5-r3

Event History

Nov 7, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-116542

Frequently Asked Questions

Which CleanStart package variants are identified as affected?