CLEANSTART-2026-AT88149 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

🗓️ 18 Feb 2026 00:37:41Reported by GoogleType

osv🔗 osv.dev👁 10 Views

CLEANSTART-2026-AT88149 allows wildcard subject alternative names in leaf certificates despite exclusion; mongodb package has vulnerabilities.

Reporter	Title	Published	Views	Family All 1934
OSV	CLEANSTART-2026-ZN75891 Security fixes in aws-flb-kinesis 1.10.3-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-ZO91195 go-redis is the official Redis client library for the Go programming language	30 Jan 202615:30	–	osv
OSV	CLEANSTART-2026-ZP68963 SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process	30 Jan 202615:47	–	osv
OSV	CLEANSTART-2026-ZR76960 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-47911, CVE-2025-58190, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-p77j-4mvh-x3m3 applied in versions: 1.24.0-r0, 1.29.0-r0, 1.29.0-r1	18 May 202613:08	–	osv
OSV	CLEANSTART-2026-ZS48821 Security fixes in harbor-registry-fips 2.6.2-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-ZU09124 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions	15 Apr 202600:54	–	osv
OSV	CLEANSTART-2026-ZV01443 Security fixes in opentofu-fips 1.7.10-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-ZW09225 Security fixes for CVE-2025-22868, CVE-2025-47911, CVE-2025-47912, CVE-2025-47913, CVE-2025-47914, CVE-2025-58181, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-58190, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-25681, CVE-2026-27136, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33186, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, CVE-2026-42502, CVE-2026-42504, CVE-2026-46598 applied in versions: 2.15.0-r0, 2.15.0-r1, 2.15.0-r2, 2.15.0-r3, 2.16.0-r3	8 Jun 202612:49	–	osv
OSV	CLEANSTART-2026-ZX58669 Security fixes for CVE-2025-61727, CVE-2025-61729, CVE-2025-61732, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142 applied in versions: 1.5.1-r0, 1.5.1-r1, 1.5.1-r2	1 Apr 202609:43	–	osv
OSV	CLEANSTART-2026-ZZ86582 Security fixes in prometheus-operator-fips 0.86.2-r0	30 Jul 202607:10	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-AT88149
osv	www.osv.dev/vulnerability/CVE-2025-14847
osv	www.osv.dev/vulnerability/CVE-2025-58181
osv	www.osv.dev/vulnerability/CVE-2025-61727
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-14847
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58181
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61727

02 Apr 2026 08:52Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.19.8

EPSS0.83007