CLEANSTART-2026-WB12909
See a problem?- Import Source
- https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-WB12909.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLEANSTART-2026-WB12909
- Upstream
- Published
- 2026-04-16T01:02:48.908159Z
- Modified
- 2026-05-20T18:00:15.869353458Z
- Severity
-
- 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions
- Details
-
Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details.
- References
-
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WB12909.json
- https://osv.dev/vulnerability/CVE-2025-15558
- https://osv.dev/vulnerability/CVE-2025-47907
- https://osv.dev/vulnerability/CVE-2025-66564
- https://osv.dev/vulnerability/CVE-2026-1229
- https://osv.dev/vulnerability/CVE-2026-22039
- https://osv.dev/vulnerability/CVE-2026-22703
- https://osv.dev/vulnerability/CVE-2026-22772
- https://osv.dev/vulnerability/CVE-2026-23831
- https://osv.dev/vulnerability/CVE-2026-23881
- https://osv.dev/vulnerability/CVE-2026-24051
- https://osv.dev/vulnerability/CVE-2026-24117
- https://osv.dev/vulnerability/CVE-2026-24137
- https://osv.dev/vulnerability/CVE-2026-25679
- https://osv.dev/vulnerability/CVE-2026-26958
- https://osv.dev/vulnerability/CVE-2026-27139
- https://osv.dev/vulnerability/CVE-2026-27142
- https://osv.dev/vulnerability/CVE-2026-32280
- https://osv.dev/vulnerability/CVE-2026-32281
- https://osv.dev/vulnerability/CVE-2026-32282
- https://osv.dev/vulnerability/CVE-2026-32283
- https://osv.dev/vulnerability/CVE-2026-32289
- https://osv.dev/vulnerability/CVE-2026-33186
- https://osv.dev/vulnerability/CVE-2026-33810
- https://osv.dev/vulnerability/ghsa-2464-8j7c-4cjm
- https://osv.dev/vulnerability/ghsa-29wx-vh33-7x7r
- https://osv.dev/vulnerability/ghsa-2x5j-vhc8-9cwm
- https://osv.dev/vulnerability/ghsa-459x-q9hg-4gpq
- https://osv.dev/vulnerability/ghsa-4qg8-fj49-pxjh
- https://osv.dev/vulnerability/ghsa-4vq8-7jfc-9cvp
- https://osv.dev/vulnerability/ghsa-6m8w-jc87-6cr7
- https://osv.dev/vulnerability/ghsa-88jx-383q-w4qc
- https://osv.dev/vulnerability/ghsa-95pr-fxf5-86gv
- https://osv.dev/vulnerability/ghsa-c5q2-7r4c-mv6g
- https://osv.dev/vulnerability/ghsa-c6gw-w398-hv78
- https://osv.dev/vulnerability/ghsa-c77r-fh37-x2px
- https://osv.dev/vulnerability/ghsa-f83f-xpx7-ffpw
- https://osv.dev/vulnerability/ghsa-fv92-fjc5-jj9h
- https://osv.dev/vulnerability/ghsa-jrr2-x33p-6hvc
- https://osv.dev/vulnerability/ghsa-mh63-6h87-95cp
- https://osv.dev/vulnerability/ghsa-mqqf-5wvp-8fh8
- https://osv.dev/vulnerability/ghsa-p77j-4mvh-x3m3
- https://osv.dev/vulnerability/ghsa-qjvc-p88j-j9rm
- https://osv.dev/vulnerability/ghsa-r5p3-955p-5ggq
- https://osv.dev/vulnerability/ghsa-v23v-6jw2-98fq
- https://osv.dev/vulnerability/ghsa-v6v8-xj6m-xwqh
- https://osv.dev/vulnerability/ghsa-xw73-rw38-6vjc
- https://nvd.nist.gov/vuln/detail/CVE-2025-15558
- https://nvd.nist.gov/vuln/detail/CVE-2025-47907
- https://nvd.nist.gov/vuln/detail/CVE-2025-66564
- https://nvd.nist.gov/vuln/detail/CVE-2026-1229
- https://nvd.nist.gov/vuln/detail/CVE-2026-22039
- https://nvd.nist.gov/vuln/detail/CVE-2026-22703
- https://nvd.nist.gov/vuln/detail/CVE-2026-22772
- https://nvd.nist.gov/vuln/detail/CVE-2026-23831
- https://nvd.nist.gov/vuln/detail/CVE-2026-23881
- https://nvd.nist.gov/vuln/detail/CVE-2026-24051
- https://nvd.nist.gov/vuln/detail/CVE-2026-24117
- https://nvd.nist.gov/vuln/detail/CVE-2026-24137
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679
- https://nvd.nist.gov/vuln/detail/CVE-2026-26958
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142
- https://nvd.nist.gov/vuln/detail/CVE-2026-32280
- https://nvd.nist.gov/vuln/detail/CVE-2026-32281
- https://nvd.nist.gov/vuln/detail/CVE-2026-32282
- https://nvd.nist.gov/vuln/detail/CVE-2026-32283
- https://nvd.nist.gov/vuln/detail/CVE-2026-32289
- https://nvd.nist.gov/vuln/detail/CVE-2026-33186
- https://nvd.nist.gov/vuln/detail/CVE-2026-33810