CLEANSTART-2026-KC83705 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

🗓️ 15 Apr 2026 00:53:10Reported by GoogleType

osv

osv🔗 osv.dev👁 19 Views

Security vulnerabilities in tempo package; chain building does not limit work with many certificates.

Reporter	Title	Published	Views	Family All 14740
OSV	MINI-68PX-3MPF-4HC7	13 Apr 202602:32	–	osv
OSV	MINI-68Q9-4RVR-P4JW	12 Apr 202620:01	–	osv
OSV	MINI-68RJ-HPHR-JFGR	4 Mar 202605:25	–	osv
OSV	MINI-68V4-9VQ8-PPRP	12 Apr 202620:04	–	osv
OSV	MINI-68VG-8GMV-6GV3	22 Mar 202619:00	–	osv
OSV	MINI-68X3-V2FM-69W4	12 Apr 202618:25	–	osv
OSV	MINI-6932-8MG6-PG55	11 Apr 202615:17	–	osv
OSV	MINI-6935-H4CX-P5F4	11 Apr 202616:17	–	osv
OSV	MINI-6943-M3C4-72HV	1 Jul 202623:43	–	osv
OSV	MINI-6958-RCGR-RGRQ	7 Dec 202516:01	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KC83705.json
osv	www.osv.dev/vulnerability/CVE-2025-11065
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61727
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68119
osv	www.osv.dev/vulnerability/CVE-2026-24051

15 Apr 2026 05:45Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.01945

tempo package security vulnerabilities chain building work limit certificates