CLEANSTART-2026-YG39524: Security fix for GHSA-gcjh-h69q-9w9g applied in: yunikorn-k8shim 1.8.0-r5

Q: Which package release includes the security fix?

The fix is applied in cleanstart/yunikorn-k8shim version 1.8.0-r5. The issue is resolved in later releases as well.

Q: Does exploitation require authentication or user interaction?

The supplied vector indicates that an attacker does not need privileges or user interaction. The attack vector is network-based, with low attack complexity and an additional attack requirement present.

Q: What is the expected impact if exploited?

The supplied severity vector indicates low impact to confidentiality and no impact to integrity or availability. It does not indicate impact on a subsequent system.

Published Nov 14, 2026

Updated

Security vulnerability affects the yunikorn-k8shim package. This issue is resolved in later releases. See references for vulnerability details.

Affected Software

1 affected componentFixes available

cleanstart/yunikorn-k8shim<1.8.0-r5

1.8.0-r5

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/yunikorn-k8shim to a version that resolves this vulnerability.
Fixed in 1.8.0-r5
Upgrade
Upgrade yunikorn-k8shim to a version that resolves this vulnerability.
Fixed in 1.8.0-r5

Child vulnerabilities

Contains the following vulnerabilities.

GHSA-gcjh-h69q-9w9g

Frequently Asked Questions

Which package release includes the security fix?

The fix is applied in cleanstart/yunikorn-k8shim version 1.8.0-r5. The issue is resolved in later releases as well.

Does exploitation require authentication or user interaction?

The supplied vector indicates that an attacker does not need privileges or user interaction. The attack vector is network-based, with low attack complexity and an additional attack requirement present.

What is the expected impact if exploited?

The supplied severity vector indicates low impact to confidentiality and no impact to integrity or availability. It does not indicate impact on a subsequent system.

CLEANSTART-2026-YG39524: Security fix for GHSA-gcjh-h69q-9w9g applied in: yunikorn-k8shim 1.8.0-r5

Affected Software

Remediation

Child vulnerabilities

Frequently Asked Questions

Which package release includes the security fix?

Does exploitation require authentication or user interaction?

What is the expected impact if exploited?

Company

Resources

Contact

Frequently Asked Questions

Which package release includes the security fix?

Does exploitation require authentication or user interaction?

What is the expected impact if exploited?