CLEANSTART-2026-XP66045: json-smart through 2

Q: What does an attacker need to exploit this issue?

The available vector indicates network access is required. Exploitation is rated low complexity and does not require privileges or user interaction.

Q: What is the expected security impact?

The reported impact is limited to integrity, rated low. No confidentiality or availability impact is reported.

Q: Which component versions are identified as vulnerable?

The affected component is identified as json-smart through version 2. The provided data does not specify which strimzi-kafka-operator package versions include an affected json-smart version.

Published Nov 12, 2026

Updated

Security vulnerability affects the strimzi-kafka-operator package. json-smart through 2.

Affected Software

1 affected componentFixes available

cleanstart/strimzi-kafka-operator<1.3.0-r0

1.3.0-r0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/strimzi-kafka-operator to a version that resolves this vulnerability.
Fixed in 1.3.0-r0

Event History

Nov 12, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-113602

Frequently Asked Questions

What does an attacker need to exploit this issue?

The available vector indicates network access is required. Exploitation is rated low complexity and does not require privileges or user interaction.

What is the expected security impact?

The reported impact is limited to integrity, rated low. No confidentiality or availability impact is reported.

Which component versions are identified as vulnerable?

The affected component is identified as json-smart through version 2. The provided data does not specify which strimzi-kafka-operator package versions include an affected json-smart version.

CLEANSTART-2026-XP66045: json-smart through 2

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Which component versions are identified as vulnerable?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Which component versions are identified as vulnerable?