CLEANSTART-2026-GV62494 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

🗓️ 30 Jan 2026 14:41:53Reported by GoogleType

osv🔗 osv.dev👁 24 Views

Velero vulnerabilities; excluded subdomain constraint does not limit wildcard names in leaf cert.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in crypto/x509 [CVE-2025-61729]	14 Apr 202616:58	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	1 Dec 202516:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in DataStage on Cloud Pak for Data	25 Feb 202616:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image	10 Mar 202612:40	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities addressed with IBM Business Automation Workflow cumulative fixes April 2026	27 May 202615:10	–	ibm
IBM Security Bulletins	Security Bulletin: Enumeration of users, compromised data confidentiality and integrity, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	23 Mar 202616:22	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	9 Feb 202611:57	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Allocation of Resources in net/textproto [CVE-2025-61724]	20 Apr 202618:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Financial Transaction Manager is impacted by multiple vulnerabilities in RedHat Proxy for Kubernetes RBAC authorization	1 Apr 202615:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to Improper Certificate Validation in Golang Go (CVE-2025-61727)	14 Apr 202617:03	–	ibm

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-GV62494
osv	www.osv.dev/vulnerability/CVE-2025-46394
osv	www.osv.dev/vulnerability/CVE-2025-58183
osv	www.osv.dev/vulnerability/CVE-2025-58185
osv	www.osv.dev/vulnerability/CVE-2025-58187
osv	www.osv.dev/vulnerability/CVE-2025-58188
osv	www.osv.dev/vulnerability/CVE-2025-58189
osv	www.osv.dev/vulnerability/CVE-2025-58251
osv	www.osv.dev/vulnerability/CVE-2025-61723
osv	www.osv.dev/vulnerability/CVE-2025-61724

18 Sep 2026 12:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.00661

velero vulnerabilities excluded subdomain constraint wildcard names leaf certificate