{"id":"CLEANSTART-2025-US16386","summary":"Security fixes for GHSA-qxp5-gwg8-xv66, GHSA-vvgc-356p-c3xw applied in versions: 1.7.2-r0","details":"Multiple security vulnerabilities affect the vault-k8s-fips package. These issues are resolved in later releases. See references for individual GHSA details.","modified":"2026-09-18T12:15:15.592360477Z","published":"2026-01-16T11:58:18.007779Z","withdrawn":"2026-09-18T11:59:01.768079Z","related":["CLEANSTART-2026-GQ95457","CLEANSTART-2026-QA69007"],"upstream":["GHSA-qxp5-gwg8-xv66","GHSA-vvgc-356p-c3xw"],"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2025/CLEANSTART-2025-US16386.json"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-qxp5-gwg8-xv66"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-vvgc-356p-c3xw"}],"affected":[{"package":{"name":"vault-k8s-fips","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.2-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2025/CLEANSTART-2025-US16386.json"}}],"schema_version":"1.9.0"}