CLEANSTART-2026-EJ23908

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-EJ23908.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-EJ23908

Upstream

CVE-2026-97032

Published

2026-11-13T00:37:41Z

Modified

2026-11-13T00:45:06Z

Summary

HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently

Details

Security vulnerability affects the trust-manager package. HTTP/2 servers could end up crashing due to inadvertently modifying its HPACK encoder concurrently.

References

Affected packages

CleanStart / trust-manager

Package

Name: trust-manager
Purl: pkg:apk/cleanstart/trust-manager

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.25.0-r1

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-EJ23908.json"