CLEANSTART-2026-LX00237: In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/

Q: Which listed software packages should be reviewed for this issue?

The affected software entries are cleanstart/kafka, cleanstart/solr, and cleanstart/rundeck.

Q: Does the available information identify a fixed version or a temporary mitigation?

No fixed versions or mitigation steps are provided in the available data.

Published Nov 11, 2026

Updated

CVE-2026-76184 affects multiple packages. In Eclipse Jetty, HttpClient may receive a redirect of the form: /secure/. See references for individual vulnerability details.

Affected Software

4 affected componentsFixes available

cleanstart/kafka<4.3.2-r0

4.3.2-r0

cleanstart/kafka<4.0.2-r6

4.0.2-r6

cleanstart/solr<10.0.0-r14

10.0.0-r14

cleanstart/rundeck<6.1.0-r5

6.1.0-r5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kafka to a version that resolves this vulnerability.
Fixed in 4.3.2-r0
Upgrade
Upgrade cleanstart/kafka to a version that resolves this vulnerability.
Fixed in 4.0.2-r6
Upgrade
Upgrade cleanstart/solr to a version that resolves this vulnerability.
Fixed in 10.0.0-r14
Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.1.0-r5

Event History

Nov 11, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-76184

Frequently Asked Questions

Which listed software packages should be reviewed for this issue?

The affected software entries are cleanstart/kafka, cleanstart/solr, and cleanstart/rundeck.

Does the available information identify a fixed version or a temporary mitigation?

No fixed versions or mitigation steps are provided in the available data.

CLEANSTART-2026-LX00237: In Eclipse Jetty, HttpClient may receive a redirect of the form: ``` /secure/

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which listed software packages should be reviewed for this issue?

Does the available information identify a fixed version or a temporary mitigation?

Company

Resources

Contact

Frequently Asked Questions

Which listed software packages should be reviewed for this issue?

Does the available information identify a fixed version or a temporary mitigation?