CLEANSTART-2026-WT35868 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

🗓️ 10 Apr 2026 01:04:58Reported by GoogleType

osv

osv🔗 osv.dev👁 3 Views

Vulnerabilities in gitness; chain building overworks when many intermediates in VerifyOptions.

Reporter	Title	Published	Views	Family All 12686
OSV	MINI-2JWQ-QJWF-4575	31 Jan 202614:17	–	osv
OSV	MINI-2M2H-XPWR-7P43	4 Mar 202605:20	–	osv
OSV	MINI-2M2J-2634-2GRJ	5 Dec 202512:32	–	osv
OSV	MINI-2M9X-H336-6CP2	4 Mar 202605:20	–	osv
OSV	MINI-2MC2-QVPF-Q4X2	4 Mar 202605:20	–	osv
OSV	MINI-2MCV-WMR5-P597	12 Apr 202602:18	–	osv
OSV	MINI-2MFX-RCFF-XM4X	11 Apr 202615:31	–	osv
OSV	MINI-2MGC-87VQ-65GC	20 Mar 202619:45	–	osv
OSV	MINI-2MGV-6PMC-H6VR	11 Apr 202616:17	–	osv
OSV	MINI-2MH9-XFVW-J768	4 Mar 202605:20	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WT35868.json
osv	www.osv.dev/vulnerability/CVE-2025-22868
osv	www.osv.dev/vulnerability/CVE-2025-30153
osv	www.osv.dev/vulnerability/CVE-2025-61726
osv	www.osv.dev/vulnerability/CVE-2025-61728
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2025-61730
osv	www.osv.dev/vulnerability/CVE-2025-68119
osv	www.osv.dev/vulnerability/CVE-2026-32280
osv	www.osv.dev/vulnerability/CVE-2026-32281

23 Jun 2026 05:15Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.19.8

EPSS0.01945

gitness package security vulnerabilities chain building intermediate certificates VerifyOptions