CLEANSTART-2026-SK36124

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK36124.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-SK36124
Upstream
Published
2026-10-30T09:29:09Z
Modified
2026-10-31T01:01:47Z
Severity
  • 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will...
Details

CVE-2026-27137 affects multiple packages. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered. See references for individual vulnerability details.

References

Affected packages

CleanStart
kubernetes-csi-external-snapshotter

Package

Name
kubernetes-csi-external-snapshotter
Purl
pkg:apk/cleanstart/kubernetes-csi-external-snapshotter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.6.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK36124.json"
kubernetes-csi-external-snapshotter

Package

Name
kubernetes-csi-external-snapshotter
Purl
pkg:apk/cleanstart/kubernetes-csi-external-snapshotter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.6.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK36124.json"
kubernetes-csi-external-snapshotter

Package

Name
kubernetes-csi-external-snapshotter
Purl
pkg:apk/cleanstart/kubernetes-csi-external-snapshotter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.6.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK36124.json"
opentelemetry-collector-contrib

Package

Name
opentelemetry-collector-contrib
Purl
pkg:apk/cleanstart/opentelemetry-collector-contrib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.144.0-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-SK36124.json"