CLEANSTART-2026-QZ16523

See a problem?
Import Source
https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-QZ16523.json
JSON Data
https://api.test.osv.dev/v1/vulns/CLEANSTART-2026-QZ16523
Upstream
  • CVE-2025-58183
  • CVE-2025-61725
  • ghsa-6v2p-p543-phr9
  • ghsa-f6x5-jh6r-wrfv
  • ghsa-hcg3-q754-cr77
  • ghsa-j5w8-q4qc-rx2x
  • ghsa-mh63-6h87-95cp
  • ghsa-qxp5-gwg8-xv66
  • ghsa-v778-237x-gjrc
  • ghsa-vvgc-356p-c3xw
Published
2026-04-14T00:44:44.379807Z
Modified
2026-05-21T10:30:09.185333314Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate
Details

Multiple security vulnerabilities affect the modelmesh-runtime-adapter package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details.

References

Affected packages

CleanStart / modelmesh-runtime-adapter

Package

Name
modelmesh-runtime-adapter

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.12.0-r1

Database specific

source 
"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-QZ16523.json"