CLEANSTART-2026-VV28262: amqp091-go is a Go AMQP 0

Q: Which Cleanstart packages are identified as affected?

The affected software listed for this advisory is cleanstart/minio and cleanstart/keda.

Q: Can this be exploited remotely without authentication or user interaction?

The supplied vector indicates network reachability, no privileges required, and no user interaction. It also indicates an additional attack requirement is present (AT:P).

Q: What is the expected impact if exploitation succeeds?

The vector indicates low availability impact and no indicated impact to confidentiality or integrity. No impact is indicated for subsequent systems.

Q: When was this advisory published or last modified?

It was published on 2026-11-11 and modified on 2026-11-11.

Published Nov 11, 2026

Updated

CVE-2026-107386 affects multiple packages. amqp091-go is a Go AMQP 0. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/minio<0.20250907.161309-r9

0.20250907.161309-r9

cleanstart/keda<2.19.0-r4

2.19.0-r4

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/minio to a version that resolves this vulnerability.
Fixed in 0.20250907.161309-r9
Upgrade
Upgrade cleanstart/keda to a version that resolves this vulnerability.
Fixed in 2.19.0-r4

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-107386

Frequently Asked Questions

Which Cleanstart packages are identified as affected?

The affected software listed for this advisory is cleanstart/minio and cleanstart/keda.

Can this be exploited remotely without authentication or user interaction?

The supplied vector indicates network reachability, no privileges required, and no user interaction. It also indicates an additional attack requirement is present (AT:P).

What is the expected impact if exploitation succeeds?

The vector indicates low availability impact and no indicated impact to confidentiality or integrity. No impact is indicated for subsequent systems.

When was this advisory published or last modified?

It was published on 2026-11-11 and modified on 2026-11-11.

CLEANSTART-2026-VV28262: amqp091-go is a Go AMQP 0

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which Cleanstart packages are identified as affected?

Can this be exploited remotely without authentication or user interaction?

What is the expected impact if exploitation succeeds?

When was this advisory published or last modified?

Company

Resources

Contact

Frequently Asked Questions

Which Cleanstart packages are identified as affected?

Can this be exploited remotely without authentication or user interaction?

What is the expected impact if exploitation succeeds?

When was this advisory published or last modified?