CLEANSTART-2026-AC01087 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the gitness package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

GHSA-F2G3-HH2R-CWGC vulnerabilities

Vulnerabilities for packages: envoy-gateway, kots, portieris, gitness, zot, argocd-image-updater...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: chartmuseum, sftpgo-plugin-auth, wire-go, kube-logging-operator, kuberlr, local-static-provisioner, redka, crossplane-provider-keycloak, kpt, kube-metrics-adapter, src-fingerprint, kubernetes-event-exporter, extism, velero, sftpgo-plugin-pubsub, gitness, yace,...