CLEANSTART-2026-KC83705 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

🗓️ 15 Apr 2026 00:53:10Reported by GoogleType

osv

osv🔗 osv.dev👁 24 Views

Security vulnerabilities in tempo package; chain building does not limit work with many certificates.

Reporter	Title	Published	Views	Family All 15542
OSV	MINI-7545-MJG7-7G4F	12 Apr 202608:47	–	osv
OSV	MINI-754H-3Q6Q-2W5Q	8 Jun 202601:49	–	osv
OSV	MINI-7574-V78V-38PQ	11 Apr 202614:46	–	osv
OSV	MINI-7575-G2RV-F3VJ	4 Mar 202605:26	–	osv
OSV	MINI-758Q-G3W3-V9G8	12 Apr 202620:02	–	osv
OSV	MINI-759M-Q86P-G7J7	11 Apr 202614:46	–	osv
OSV	MINI-75FQ-86VG-QP87	31 Jan 202613:49	–	osv
OSV	MINI-75G2-MM5W-37M2	31 Jan 202614:17	–	osv
OSV	MINI-75G3-2G8P-3JR2	4 Mar 202605:26	–	osv
OSV	MINI-75GV-CX7Q-6JWH	6 Dec 202515:52	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KC83705.json
osv	www.osv.dev/vulnerability/CVE-2025-11065
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61727
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68119
osv	www.osv.dev/vulnerability/CVE-2026-24051

15 Apr 2026 05:45Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.01945

tempo package security vulnerabilities chain building work limit certificates