CLEANSTART-2026-TW14168: flaw was found in Netty RtspDecoder
Published Nov 12, 2026
·Updated
CVE-2026-93565 affects multiple packages. A flaw was found in Netty RtspDecoder. See references for individual vulnerability details.
Affected Software
2 affected componentsFixes available
cleanstart/sonarqube<26.10.0.133078-r0
26.10.0.133078-r0
cleanstart/strimzi-kafka-operator<1.3.0-r0
1.3.0-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/sonarqubeto a version that resolves this vulnerability.Fixed in 26.10.0.133078-r0 - Upgrade
Upgrade
cleanstart/strimzi-kafka-operatorto a version that resolves this vulnerability.Fixed in 1.3.0-r0
Event History
Nov 12, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Which Cleanstart packages are identified as affected?
The affected software listed is cleanstart/sonarqube and cleanstart/strimzi-kafka-operator.
2
Does exploitation require authentication or user interaction?
The supplied CVSS vector indicates no privileges are required and no user interaction is required. It also indicates network attack vector and low attack complexity.
3
What is the primary security impact?
The supplied CVSS vector indicates a high integrity impact, with no confidentiality or availability impact indicated.