CLEANSTART-2026-LK73694 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the sealed-secrets package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerability details...

CVE-2026-32280

CVE-2026-32280 affects Go’s crypto/x509 (and Go’s crypto/tls by propagation) where, during chain building, VerifyOptions.Intermediates can trigger unbounded work when many intermediates are supplied, enabling denial of service. The OpenSUSE advisories and the NVD entry confirm the issue as a chai...