CLEANSTART-2026-IY92636 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

🗓️ 16 Apr 2026 00:46:49Reported by GoogleType

osv🔗 osv.dev👁 44 Views

TLS session resumption may succeed if client or root certificate authorities mutate between handshakes in percona cluster operator.

Reporter	Title	Published	Views	Family All 2655
OSV	MINI-XM5X-V9G4-5Q8J	10 Feb 202619:33	–	osv
OSV	MINI-XM73-7VPM-6WQG	4 Mar 202605:34	–	osv
OSV	MINI-XM9H-VW3H-882C	4 Mar 202605:33	–	osv
OSV	MINI-XMCC-GP7V-8972	4 Mar 202605:33	–	osv
OSV	MINI-XMFF-952C-75HH	10 Feb 202619:31	–	osv
OSV	MINI-XMPX-MRXF-PWM6	4 Mar 202605:34	–	osv
OSV	MINI-XPRP-5HP6-Q964	4 Mar 202605:34	–	osv
OSV	MINI-XQXR-JMV8-JCH6	4 Mar 202605:34	–	osv
OSV	MINI-XRG6-2FWR-FQX2	4 Mar 202605:34	–	osv
OSV	MINI-XVJ7-7M4J-4WWV	4 Mar 202605:34	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-IY92636.json
osv	www.osv.dev/vulnerability/CVE-2025-61732
osv	www.osv.dev/vulnerability/CVE-2025-68121
osv	www.osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv
osv	www.osv.dev/vulnerability/ghsa-gx3x-vq4p-mhhv
osv	www.osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61732
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-68121

23 Apr 2026 05:02Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

EPSS0.00765