{"id":"CLEANSTART-2026-XJ84245","summary":"Rack is a modular Ruby web server interface","details":"Multiple security vulnerabilities affect the logstash-fips package. Rack is a modular Ruby web server interface. See references for individual vulnerability details.","modified":"2026-09-18T12:17:57.309589667Z","published":"2026-03-04T00:43:02.364521Z","withdrawn":"2026-09-18T11:59:01.768079Z","upstream":["CVE-2025-61770","CVE-2025-61771","CVE-2025-61772","CVE-2026-25500","GHSA-22H5-PQ3X-2GF2","GHSA-2XGQ-Q749-89FQ","GHSA-4CX2-FC23-5WG6","GHSA-6XW4-3V39-52MM","GHSA-72QJ-48G4-5XGX","GHSA-C2F4-JGMC-Q2R5","GHSA-GH9Q-2XRM-X6QV","GHSA-MHWM-JH88-3GJF","GHSA-MR3Q-G2MV-MR4Q","GHSA-MXW3-3HH2-X2MH","GHSA-P543-XPFM-54CP","GHSA-VC5P-V9HR-52MJ","GHSA-VQG5-3255-V292","GHSA-W9PC-FMGC-VXVW","GHSA-WHRJ-4476-WVMP","GHSA-WPV5-97WM-HP9C"],"database_specific":{},"references":[{"type":"ADVISORY","url":"https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XJ84245"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2025-61770"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2025-61771"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2025-61772"},{"type":"WEB","url":"https://osv.dev/vulnerability/CVE-2026-25500"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-22H5-PQ3X-2GF2"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-2XGQ-Q749-89FQ"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-4CX2-FC23-5WG6"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-6XW4-3V39-52MM"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-72QJ-48G4-5XGX"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-C2F4-JGMC-Q2R5"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-GH9Q-2XRM-X6QV"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-MHWM-JH88-3GJF"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-MR3Q-G2MV-MR4Q"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-MXW3-3HH2-X2MH"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-P543-XPFM-54CP"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-VC5P-V9HR-52MJ"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-VQG5-3255-V292"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-W9PC-FMGC-VXVW"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-WHRJ-4476-WVMP"},{"type":"WEB","url":"https://osv.dev/vulnerability/GHSA-WPV5-97WM-HP9C"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61770"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61771"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-61772"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25500"}],"affected":[{"package":{"name":"logstash-fips","ecosystem":"CleanStart"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.2.6-r0"}]}],"database_specific":{"source":"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XJ84245.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}