CLEANSTART-2026-WK32717 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

🗓️ 25 Feb 2026 00:52:13Reported by GoogleType

osv🔗 osv.dev👁 26 Views

Security vulnerabilities in spark operator allow resumed handshake to succeed if client authorities or root authorities mutate.

Reporter	Title	Published	Views	Family All 24128
OSV	AZL-77102 CVE-2025-58190 affecting package telegraf for versions less than 1.31.0-15	5 Feb 202618:16	–	osv
OSV	AZL-78925 CVE-2025-61726 affecting package golang 1.25.7-1	28 Jan 202620:16	–	osv
OSV	AZL-78929 CVE-2025-61728 affecting package golang 1.25.7-1	28 Jan 202620:16	–	osv
OSV	AZL-78933 CVE-2025-61730 affecting package golang 1.25.7-1	28 Jan 202620:16	–	osv
OSV	BELL-CVE-2025-47911 CVE-2025-47911 does not affect BellSoft software	10 Feb 202606:09	–	osv
OSV	BELL-CVE-2025-58190 CVE-2025-58190 does not affect BellSoft software	10 Feb 202606:09	–	osv
OSV	BELL-CVE-2025-61726	16 Jan 202618:04	–	osv
OSV	BELL-CVE-2025-61728	16 Jan 202618:04	–	osv
OSV	BELL-CVE-2025-61730	16 Jan 202618:04	–	osv
OSV	BELL-CVE-2025-68121	16 Jan 202618:04	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WK32717
osv	www.osv.dev/vulnerability/CVE-2025-47911
osv	www.osv.dev/vulnerability/CVE-2025-58190
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68121
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-47911
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-58190
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-61726

28 May 2026 22:00Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.19.8

EPSS0.02128