CLEANSTART-2026-NW43928: compress provides various compression algorithms

Q: Which CleanStart software entries are identified as affected?

The listed software entries are cleanstart/knative-serving, cleanstart/vault, cleanstart/velero, cleanstart/rundeck, and cleanstart/restic. The supplied data does not identify affected versions or configuration-specific exposure.

Published Nov 13, 2026

Updated

CVE-2026-116591 affects multiple packages. compress provides various compression algorithms. See references for individual vulnerability details.

Affected Software

14 affected componentsFixes available

cleanstart/knative-serving<1.22.1-r12

1.22.1-r12

cleanstart/knative-serving<1.23.0-r7

1.23.0-r7

cleanstart/vault<1.21.4-r16

1.21.4-r16

cleanstart/knative-serving<1.24.0-r2

1.24.0-r2

cleanstart/knative-serving<1.21.3-r9

1.21.3-r9

cleanstart/rundeck<6.0.1-r11

6.0.1-r11

cleanstart/rundeck<6.1.0-r6

6.1.0-r6

cleanstart/velero<1.15.2-r15

1.15.2-r15

cleanstart/velero<1.16.2-r19

1.16.2-r19

cleanstart/velero<1.17.2-r15

1.17.2-r15

cleanstart/vault<2.2.1-r0

2.2.1-r0

cleanstart/vault<2.0.4-r10

2.0.4-r10

cleanstart/vault<2.1.2-r1

2.1.2-r1

cleanstart/restic<0.18.1-r14

0.18.1-r14

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/knative-serving to a version that resolves this vulnerability.
Fixed in 1.22.1-r12
Upgrade
Upgrade cleanstart/knative-serving to a version that resolves this vulnerability.
Fixed in 1.23.0-r7
Upgrade
Upgrade cleanstart/vault to a version that resolves this vulnerability.
Fixed in 1.21.4-r16
Upgrade
Upgrade cleanstart/knative-serving to a version that resolves this vulnerability.
Fixed in 1.24.0-r2
Upgrade
Upgrade cleanstart/knative-serving to a version that resolves this vulnerability.
Fixed in 1.21.3-r9
Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.0.1-r11
Upgrade
Upgrade cleanstart/rundeck to a version that resolves this vulnerability.
Fixed in 6.1.0-r6
Upgrade
Upgrade cleanstart/velero to a version that resolves this vulnerability.
Fixed in 1.15.2-r15
Upgrade
Upgrade cleanstart/velero to a version that resolves this vulnerability.
Fixed in 1.16.2-r19
Upgrade
Upgrade cleanstart/velero to a version that resolves this vulnerability.
Fixed in 1.17.2-r15
Upgrade
Upgrade cleanstart/vault to a version that resolves this vulnerability.
Fixed in 2.2.1-r0
Upgrade
Upgrade cleanstart/vault to a version that resolves this vulnerability.
Fixed in 2.0.4-r10
Upgrade
Upgrade cleanstart/vault to a version that resolves this vulnerability.
Fixed in 2.1.2-r1
Upgrade
Upgrade cleanstart/restic to a version that resolves this vulnerability.
Fixed in 0.18.1-r14

Event History

Nov 13, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-116591

Frequently Asked Questions

Which CleanStart software entries are identified as affected?