VDB
GHSA-gjvh-7jh8-7xhm
GHSA-gjvh-7jh8-7xhm
PUBLISHED
CVSS 8.699999809265137 HIGH
Validating certificate chains which use policies is unexpectedly inefficient when certificates in the chain contain a very large number of policy mappings, possibly causing denial of service. This only affects validation of otherwise trusted certificate chains, issued by a root CA in the VerifyOptions.Roots CertPool, or in the system certificate pool.
Risk Scores
CVSS 4.0
8.699999809265137
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | tigera-operator-1.38 | 0 |
| chainguard | karpenter-fips-0.33 | 0, 0 |
| wolfi | trillian | 0, 0 |
| wolfi | kbld | 0, 0 |
| chainguard | kubernetes-event-exporter | 0 |
| wolfi | go-bindata | * |
| chainguard | eks-distro-1.33 | 0 |
| chainguard | manifest-tool | 0, 0 |
| wolfi | cri-tools | 0 |
| wolfi | envoy-ratelimit | 0 |
| chainguard | nats-server-config-reloader | * |
| chainguard | nri-apache-fips | 0, 0 |
| chainguard | kubernetes-fips-1.31 | 0 |
| chainguard | sbom-convert | 0 |
| wolfi | oras | 0, 0 |
| chainguard | metallb | 0, * |
| chainguard | kaf | 0, 0 |
| wolfi | harbor-2.12 | 0 |
| chainguard | multus-cni-4.0.2 | * |
| chainguard | elastic-agent-fips-9.0 | 0 |
…and 2401 more
Timeline
- Apr 8, 2026 CVE Published
- Apr 13, 2026 CVE Updated
- Apr 17, 2026 Security Advisory