CLEANSTART-2026-TS42581 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the chartmuseum-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

GHSA-7WRW-R4P8-38RX vulnerabilities

Vulnerabilities for packages: tfsec, kubewatch, sbom-convert, dockerize, age, speedtest-go, kuberay-operator, descheduler, fq, hivemind, wireguard-go, splunk-otel-collector, karma, sftpgo-plugin-auth, fluent-bit-plugin-loki, flannel, nuclei, kube-vip, stakater-reloader, kube-metrics-adapter,...