CLEANSTART-2026-XV36403: MessagePack is the serializer implementation for Python msgpack

Q: What access does an attacker need according to the available severity data?

The CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.

Q: What is the stated security impact?

The available CVSS data identifies high availability impact. It does not identify confidentiality or integrity impact.

Q: Which listed software should be reviewed for exposure?

The affected software list includes cleanstart/k8s-sidecar and cleanstart/airflow-3. No affected version ranges or configuration conditions are provided.

Published Nov 3, 2026

Updated

CVE-2026-114613 affects multiple packages. MessagePack is the serializer implementation for Python msgpack. See references for individual vulnerability details.

Affected Software

2 affected componentsFixes available

cleanstart/k8s-sidecar<2.14.1-r1

2.14.1-r1

cleanstart/airflow-3<3.3.2-r1

3.3.2-r1

Event History

Nov 3, 2026

Advisory Published

via OSV·12:42 AM

Data Sourced

via OSV·12:42 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-114613

Frequently Asked Questions

What access does an attacker need according to the available severity data?

The CVSS vector indicates network-based exploitation with low attack complexity. It requires no privileges and no user interaction.

What is the stated security impact?

The available CVSS data identifies high availability impact. It does not identify confidentiality or integrity impact.

Which listed software should be reviewed for exposure?

The affected software list includes cleanstart/k8s-sidecar and cleanstart/airflow-3. No affected version ranges or configuration conditions are provided.

CLEANSTART-2026-XV36403: MessagePack is the serializer implementation for Python msgpack

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need according to the available severity data?

What is the stated security impact?

Which listed software should be reviewed for exposure?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need according to the available severity data?

What is the stated security impact?

Which listed software should be reviewed for exposure?