CLEANSTART-2026-NB86636 During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succ...

Security vulnerability affects the cri-tools package. During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have failed...

CLEANSTART-2026-PU86429 During the TLS 1

Security vulnerability affects the cri-tools package. During the TLS 1...

CLEANSTART-2026-ZT95420 Within HostnameError

Security vulnerability affects the cri-tools package. Within HostnameError...

CLEANSTART-2026-OX24018 archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened

Security vulnerability affects the cri-tools package. archive/zip uses a super-linear file name indexing algorithm that is invoked the first time a file in an archive is opened...

CLEANSTART-2026-TJ01241 excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate

Security vulnerability affects the cri-tools package. An excluded subdomain constraint in a certificate chain does not restrict the usage of wildcard SANs in the leaf certificate...

CLEANSTART-2026-QA21098 net/url package does not set a limit on the number of query parameters in a query

Security vulnerability affects the cri-tools package. The net/url package does not set a limit on the number of query parameters in a query...

CLEANSTART-2026-TC21251 ParseAddress function constructs domain-literal address components through repeated string concatenation

Security vulnerability affects the cri-tools package. The ParseAddress function constructs domain-literal address components through repeated string concatenation...

CLEANSTART-2026-BK69273 Reader

Security vulnerability affects the cri-tools package. The Reader...

CLEANSTART-2026-SZ95585 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Security vulnerability affects the cri-tools package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input...

CLEANSTART-2026-YO61836 When Conn

Security vulnerability affects the cri-tools package. When Conn...

CLEANSTART-2026-RI58790 Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method

Security vulnerability affects the cri-tools package. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method...

CLEANSTART-2026-UM83284 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Security vulnerability affects the cri-tools package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate...

CLEANSTART-2026-AZ82176 Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit

Security vulnerability affects the cri-tools package. Despite HTTP headers having a default limit of 1MB, the number of cookies that can be parsed does not have a limit...

CLEANSTART-2026-EJ31642 Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion

Security vulnerability affects the cri-tools package. Parsing a maliciously crafted DER payload could allocate large amounts of memory, causing memory exhaustion...

CLEANSTART-2026-SE28304 tar

Security vulnerability affects the cri-tools package. tar...

CLEANSTART-2026-MW22726 Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL

Security vulnerability affects the cri-tools package. The Parse function permits values other than IPv6 addresses to be included in square brackets within the host component of a URL...

CLEANSTART-2026-MU09759 Cancelling a query (e

Security vulnerability affects the cri-tools package. Cancelling a query e...

CLEANSTART-2026-NW20382 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "

Security vulnerability affects the cri-tools package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", "...

CLEANSTART-2026-MQ77051 Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information

Security vulnerability affects the cri-tools package. Proxy-Authorization and Proxy-Authenticate headers persisted on cross-origin redirects potentially leaking sensitive information...

CLEANSTART-2026-CB13715 It was possible to improperly access the parent directory of an os

Security vulnerability affects the cri-tools package. It was possible to improperly access the parent directory of an os...