VDB
GO-2026-4399
GO-2026-4399
PUBLISHED
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | step-issuer | 0, 0 |
| chainguard | cert-manager-openshift-routes | 0, 0 |
| chainguard | cert-manager-openshift-routes-fips | 0, 0 |
| chainguard | cert-manager-google-cas-issuer | 0, 0 |
| chainguard | gitlab-operator-fips | 0, 0 |
| chainguard | cert-manager-csi-driver | 0, 0 |
| chainguard | cert-manager-webhook-pdns-fips | 0, 0 |
| wolfi | aws-privateca-issuer | 0, 0, 0 |
| chainguard | gitlab-operator | 0, 0 |
| chainguard | mariadb-operator | 0, 0, 0 |
| chainguard | cert-manager-csi-driver-fips | 0, 0 |
| chainguard | percona-xtradb-cluster-operator | 0, 0, 0 |
| wolfi | step-issuer | 0, 0, 0 |
| chainguard | cert-manager-cmctl-fips | 0, 0 |
| chainguard | aws-privateca-issuer-fips | 0, 0 |
| wolfi | opentelemetry-operator | 0, 0, 0 |
| chainguard | step-issuer-fips | 0, 0 |
| chainguard | percona-server-mongodb-operator | 0, 0, 0 |
| chainguard | percona-server-mongodb-operator-fips | 0, 0, 0 |
| wolfi | cert-manager-webhook-pdns | 0, 0, 0 |
…and 16 more
Timeline
- Feb 19, 2026 CVE Published
- Mar 16, 2026 CVE Updated
References
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv advisory
- https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2 fix
- https://github.com/cert-manager/cert-manager/pull/8469 fix
- https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc fix
- https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d fix
- https://github.com/cert-manager/cert-manager/pull/8467 fix
- https://github.com/cert-manager/cert-manager/pull/8468 fix