CLEANSTART-2026-KT28044 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

🗓️ 30 Apr 2026 01:03:26Reported by GoogleType

osv

osv🔗 osv.dev👁 15 Views

Terragrunt-fips vulnerability: chain building may not limit work with many intermediate certificates.

Reporter	Title	Published	Views	Family All 16351
OSV	MINI-225R-8PQG-GJQ7	11 Apr 202615:15	–	osv
OSV	MINI-226P-4H6Q-9749	22 Jun 202612:28	–	osv
OSV	MINI-226W-6FHH-FGFV	11 Apr 202615:30	–	osv
OSV	MINI-227F-4M59-HX2P	11 Apr 202620:45	–	osv
OSV	MINI-2282-M8WF-H474	11 Apr 202616:16	–	osv
OSV	MINI-2285-C85F-85XM	10 Mar 202614:47	–	osv
OSV	MINI-228W-5PJH-RPF3	7 Jun 202615:45	–	osv
OSV	MINI-22CX-PM8H-J34Q	13 Apr 202602:16	–	osv
OSV	MINI-22FX-J37M-F289	13 Mar 202606:43	–	osv
OSV	MINI-22J2-CHGR-XW85	1 Jun 202609:25	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-KT28044.json
osv	www.osv.dev/vulnerability/CVE-2025-47913
osv	www.osv.dev/vulnerability/CVE-2025-47914
osv	www.osv.dev/vulnerability/CVE-2025-58181
osv	www.osv.dev/vulnerability/CVE-2025-61727
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2026-1229
osv	www.osv.dev/vulnerability/CVE-2026-24051
osv	www.osv.dev/vulnerability/CVE-2026-25679
osv	www.osv.dev/vulnerability/CVE-2026-26958

30 Apr 2026 05:00Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.19.8

EPSS0.01557

terragrunt fips chain building intermediate certificates verify options