VDB
CLEANSTART-2026-EV91316
CLEANSTART-2026-EV91316
PUBLISHED
Record from OSV · Published April 1, 2026
Security fixes for CVE-2026-4428, ghsa-2gh3-rmm4-6rq5, ghsa-394x-vwmw-crm3, ghsa-434x-w66g-qw3r, ghsa-65p9-r9h6-22vj, ghsa-9f94-5g5w-gf6r, ghsa-hfpc-8r3f-gw53, ghsa-r6v5-fh4h-64xc, ghsa-rhfx-m35p-ff5j, ghsa-vw5v-4f2q-w9xf, ghsa-xwfj-jgwm-7wp5 applied in versions: 1.27.5-r1, 1.27.6-r0, 1.27.6-r1
Fixed versions
Upgrade to a fixed version or later. Language registries are listed first, then Linux distributions, then vendor products.
| Package | Ecosystem | Fixed in |
|---|---|---|
| ztunnel-fips | CleanStart | 1.27.6-r1 |
Affected products
| Vendor | Product | Versions |
|---|---|---|
| CleanStart | ztunnel-fips | 0 |
Timeline
- Mar 25, 2026 CVE Updated
- Apr 1, 2026 CVE Published
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CLEANSTART-2026-EV91316
vulnetix vdb fixes CLEANSTART-2026-EV91316Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CLEANSTART-2026-EV91316/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-EV91316.json advisory
- https://osv.dev/vulnerability/CVE-2026-4428 url
- https://osv.dev/vulnerability/ghsa-2gh3-rmm4-6rq5 url
- https://osv.dev/vulnerability/ghsa-394x-vwmw-crm3 url
- https://osv.dev/vulnerability/ghsa-434x-w66g-qw3r url
- https://osv.dev/vulnerability/ghsa-65p9-r9h6-22vj url
- https://osv.dev/vulnerability/ghsa-9f94-5g5w-gf6r url
- https://osv.dev/vulnerability/ghsa-hfpc-8r3f-gw53 url
- https://osv.dev/vulnerability/ghsa-r6v5-fh4h-64xc url
- https://osv.dev/vulnerability/ghsa-rhfx-m35p-ff5j url
- https://osv.dev/vulnerability/ghsa-vw5v-4f2q-w9xf url
- https://osv.dev/vulnerability/ghsa-xwfj-jgwm-7wp5 url
- https://nvd.nist.gov/vuln/detail/CVE-2026-4428 url