CLEANSTART-2026-OL17158 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68119, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x, ghsa-m6hq-p25p-ffr2, ghsa-p77j-4mvh-x3m3, ghsa-pwhc-rpq9-4c8w applied in versions: 0.7.0-r2, 0.7.0-r3, 0.7.0-r4

🗓️ 01 Apr 2026 09:23:46Reported by GoogleType

osv🔗 osv.dev👁 12 Views

Security fixes for k8ssandra client fips addressing multiple vulnerabilities in 0.7.0-r2 through 0.7.0-r4.

Reporter	Title	Published	Views	Family All 13026
OSV	CLEANSTART-2026-NT80635 Security fixes for CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-1229, CVE-2026-24051, CVE-2026-25934, CVE-2026-29181, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, CVE-2026-35469, CVE-2026-39883, CVE-2026-41506, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-3wgm-2mw2-vh5m, ghsa-3xc5-wrhm-f963, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-hfvc-g4fc-pqhx, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-mh2q-q3fh-2475, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-pc3f-x583-g7j2 applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.3.2-r1, 3.3.3-r0, 3.3.4-r0, 3.3.7-r0	18 May 202613:32	–	osv
OSV	CLEANSTART-2026-NU97479 Security fixes in wave 0.10.0-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-NV34418 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate	30 Jan 202616:04	–	osv
OSV	CLEANSTART-2026-NV36169 Security fixes for CVE-2025-61732, CVE-2025-66564, CVE-2025-68121, CVE-2026-24686, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27142, ghsa-fcv2-xgw5-pqxf applied in versions: 0.7.29-r1, 0.7.29-r2	1 Apr 202609:33	–	osv
OSV	CLEANSTART-2026-NV50142 Security fixes in gitness 3.3.0-r1	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-NV78596 Security fixes for CVE-2022-29526, CVE-2025-47907, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-4f99-4q7p-p3gh applied in versions: 0.10-r0, 0.11-r0, 0.11-r2, 0.11-r3, 0.11-r4	1 Apr 202609:32	–	osv
OSV	CLEANSTART-2026-NV82543 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate	30 Jan 202616:29	–	osv
OSV	CLEANSTART-2026-NX54250 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions	10 Apr 202601:03	–	osv
OSV	CLEANSTART-2026-NY13907 Security fixes in metallb 0.14.9-r0	30 Jul 202607:10	–	osv
OSV	CLEANSTART-2026-NZ19387 Within HostnameError	30 Jan 202614:52	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OL17158.json
osv	www.osv.dev/vulnerability/CVE-2025-58183
osv	www.osv.dev/vulnerability/CVE-2025-58185
osv	www.osv.dev/vulnerability/CVE-2025-58187
osv	www.osv.dev/vulnerability/CVE-2025-58188
osv	www.osv.dev/vulnerability/CVE-2025-58189
osv	www.osv.dev/vulnerability/CVE-2025-61723
osv	www.osv.dev/vulnerability/CVE-2025-61724
osv	www.osv.dev/vulnerability/CVE-2025-61725
osv	www.osv.dev/vulnerability/CVE-2025-61726

01 Apr 2026 18:45Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.01945

SSVC