CLEANSTART-2026-XH23377

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json
JSON Data
https://api.osv.dev/v1/vulns/CLEANSTART-2026-XH23377
Upstream
  • CVE-2026-111943
Published
2026-11-11T00:40:11Z
Modified
2026-11-11T01:00:10Z
Summary
On most platforms, Go uses the given system root certificates
Details

CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details.

References

Affected packages

CleanStart
kubernetes

Package

Name
kubernetes
Purl
pkg:apk/cleanstart/kubernetes

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34.11-r0

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"
kubernetes

Package

Name
kubernetes
Purl
pkg:apk/cleanstart/kubernetes

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.34.13-r2

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"
wait-for-port

Package

Name
wait-for-port
Purl
pkg:apk/cleanstart/wait-for-port

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.0.10-r8

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"
haproxy-ingress

Package

Name
haproxy-ingress
Purl
pkg:apk/cleanstart/haproxy-ingress

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.15.4-r11

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"
opentelemetry-collector-contrib

Package

Name
opentelemetry-collector-contrib
Purl
pkg:apk/cleanstart/opentelemetry-collector-contrib

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
0.163.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"
rundeck

Package

Name
rundeck
Purl
pkg:apk/cleanstart/rundeck

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
6.1.0-r3

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"
argo-workflows

Package

Name
argo-workflows
Purl
pkg:apk/cleanstart/argo-workflows

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
4.1.6-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-XH23377.json"