Security fixes in yunikorn-web 1.7.0-r0 (CVE-2026-27139)
Affects yunikorn-webSource GCVE Database
Not known to be exploited · CVSS 2.5 Low · fixed in 1.7.0-r0 : update yunikorn-web when convenient.
Data as of 10/25/2026, 04:40:12 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 1.7.0-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartyunikorn-web | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Apply the patch by upgrading to yunikorn-web version 1.7.0-r0 to remediate CVE-2026-27139 and the other addressed vulnerabilities. Since a patch is available, this is the recommended remediation step.
Description
The yunikorn-web package version 1.7.0-r0 addresses 21 security vulnerabilities, including CVE-2026-27139. This release provides security fixes to mitigate these issues. No CVSS score is available for CVE-2026-27139, and there is no indication of known exploits in the wild. The patch is available and should be applied to remediate the vulnerabilities.
Impact
The vulnerabilities fixed in yunikorn-web 1.7.0-r0 could potentially expose affected systems to security risks if unpatched. However, no known exploits are reported in the wild for CVE-2026-27139. The impact severity is not explicitly stated due to lack of CVSS data.
Summary
CVE-2026-27139 is one of 21 vulnerabilities fixed in yunikorn-web version 1.7.0-r0. The exact technical details of CVE-2026-27139 are not provided, but the package update includes security fixes addressing this and other vulnerabilities. The vendor has released a patched version 1.7.0-r0 that resolves these issues. No cloud service is involved, and no active exploitation has been reported.