CLEANSTART-2026-MU58230

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-MU58230
Upstream
Published
2026-10-31T13:44:26Z
Modified
2026-10-31T16:04:20Z
Severity
  • 10.0 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...
Details

CVE-2025-68121 affects multiple packages. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed. See references for individual vulnerability details.

References

Affected packages

CleanStart
coredns-fips

Package

Name
coredns-fips
Purl
pkg:apk/cleanstart/coredns-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.14.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
step-cli

Package

Name
step-cli
Purl
pkg:apk/cleanstart/step-cli

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.28.7-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
nats-server-config-reloader-fips

Package

Name
nats-server-config-reloader-fips
Purl
pkg:apk/cleanstart/nats-server-config-reloader-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.21.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
gatekeeper

Package

Name
gatekeeper
Purl
pkg:apk/cleanstart/gatekeeper

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.20.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
gatekeeper-fips

Package

Name
gatekeeper-fips
Purl
pkg:apk/cleanstart/gatekeeper-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
3.20.1-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
nats-server-config-reloader-fips

Package

Name
nats-server-config-reloader-fips
Purl
pkg:apk/cleanstart/nats-server-config-reloader-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.20.1-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
nats-server-fips

Package

Name
nats-server-fips
Purl
pkg:apk/cleanstart/nats-server-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.9.25-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
newrelic-k8s-metadata-injection

Package

Name
newrelic-k8s-metadata-injection
Purl
pkg:apk/cleanstart/newrelic-k8s-metadata-injection

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.39.2-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
nats-server-config-reloader-fips

Package

Name
nats-server-config-reloader-fips
Purl
pkg:apk/cleanstart/nats-server-config-reloader-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.19.3-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
nats-server-fips

Package

Name
nats-server-fips
Purl
pkg:apk/cleanstart/nats-server-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.10.29-r4

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
kyverno-policy-reporter-ui-fips

Package

Name
kyverno-policy-reporter-ui-fips
Purl
pkg:apk/cleanstart/kyverno-policy-reporter-ui-fips

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.4.4-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
cloudflared

Package

Name
cloudflared
Purl
pkg:apk/cleanstart/cloudflared

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2025.11.1-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
go-fips-1.24

Package

Name
go-fips-1.24
Purl
pkg:apk/cleanstart/go-fips-1.24

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.11-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
go-fips-1.24

Package

Name
go-fips-1.24
Purl
pkg:apk/cleanstart/go-fips-1.24

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.24.12-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"
go-fips-1.24

Package

Name
go-fips-1.24
Purl
pkg:apk/cleanstart/go-fips-1.24

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.25.5-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MU58230.json"