CLEANSTART-2026-QE70350 source-address critical option in the Permissions returned by an authentication callback was only enforced for the PublicKeyCallback and VerifiedPublicKeyCallback paths, extending the fix for CVE-2...

🗓️ 04 Sep 2026 00:43:16Reported by GoogleType

osv🔗 osv.dev👁 4 Views

source-address enforcement gap in tekton-chains-fips callback paths extending CVE-2026-46595 fix.

Reporter	Title	Published	Views	Family All 17736
OSV	CGA-FWC4-78XG-QQXQ	14 Aug 202612:06	–	osv
OSV	CGA-FWC9-JVH7-63P8	20 Aug 202613:23	–	osv
OSV	CGA-FWF5-66MV-48RQ	29 Aug 202613:26	–	osv
OSV	CGA-FWFR-9Q64-W673	14 Aug 202614:34	–	osv
OSV	CGA-FWG6-FQ7M-Q5H6	29 Aug 202612:49	–	osv
OSV	CGA-FWH8-WXJ2-873G	14 Aug 202612:51	–	osv
OSV	CGA-FWJM-PPJF-3W7V	14 Aug 202613:20	–	osv
OSV	CGA-FWJV-FX6Q-PJ42	14 Aug 202613:49	–	osv
OSV	CGA-FWM2-G7XQ-2VWM	29 Aug 202611:46	–	osv
OSV	CGA-FWMQ-W877-M5WG	14 Aug 202613:57	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QE70350.json
osv	www.osv.dev/vulnerability/CVE-2026-56854
osv	www.osv.dev/vulnerability/CVE-2026-56864
osv	www.osv.dev/vulnerability/CVE-2026-56865
osv	www.osv.dev/vulnerability/ghsa-gcjh-h69q-9w9g
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56854
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56864
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-56865

04 Sep 2026 01:15Current

6Medium risk

Vulners AI Score6

CVSS 3.19.8

EPSS0.00325

tekton-chains-fips source-address callback enforcement CVE-2026-46595 library authentication