CLEANSTART-2026-XN15507 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

🗓️ 30 Apr 2026 00:51:56Reported by GoogleType

osv

osv🔗 osv.dev👁 2 Views

Unbounded work in chain building with intermediates in VerifyOptions affects opentofu-fips security.

Reporter	Title	Published	Views	Family All 16916
osv	MINI-28RC-68QC-3V6C	11 Apr 202614:45	–	osv
osv	MINI-28VJ-WHGQ-6FQG	13 Apr 202602:16	–	osv
osv	MINI-28VW-Q9MC-G9HF	13 Mar 202613:07	–	osv
osv	MINI-28WX-4338-WGVR	4 Jun 202609:35	–	osv
osv	MINI-28WX-93X7-F9VF	11 Apr 202615:46	–	osv
osv	MINI-28XF-7J48-74QP	22 Nov 202504:41	–	osv
osv	MINI-28XG-73VJ-7XXF	12 Jul 202623:29	–	osv
osv	MINI-28XX-Q988-HC2Q	1 Jul 202618:42	–	osv
osv	MINI-292V-8P92-Q7FP	17 May 202618:24	–	osv
osv	MINI-2938-QP77-C5MH	6 Dec 202521:19	–	osv

Source	Link
github	www.github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XN15507.json
osv	www.osv.dev/vulnerability/CVE-2020-8912
osv	www.osv.dev/vulnerability/CVE-2025-47913
osv	www.osv.dev/vulnerability/CVE-2025-47914
osv	www.osv.dev/vulnerability/CVE-2025-58181
osv	www.osv.dev/vulnerability/CVE-2025-61727
osv	www.osv.dev/vulnerability/CVE-2025-61729
osv	www.osv.dev/vulnerability/CVE-2026-1229
osv	www.osv.dev/vulnerability/CVE-2026-24051
osv	www.osv.dev/vulnerability/CVE-2026-25679

23 Jun 2026 05:15Current

7.1High risk

Vulners AI Score7.1

CVSS 3.19.8

EPSS0.00651

chain building vulnerability intermediate certificates verify options opentofu fips vulnerabilities