SECURITY ANNOUNCEMENT

CVE-2026-99001

23 October 2026

scheduled and a queued instance is drained before the client array is touched. A running instance still finds a live adapter, since the (cherry picked from commit a23f27d5ec11c3f418c5e5531eea34ccda2b5b20)

Introduced

6.17f0e53aadd702c64b2c2090996751c9be043f9e80

Fixed releases

6.18.582efa187fd4c9b8d7edcae0c1acf46739ce39fd01

7.2.11175d654cd48320ad52d0f82dc3f4e3c063c3c5ca

7.3611857adc9e7b0ee1239a0baf38498922ca5a12e

View source announcement ↗