Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.4
cleanstart vault can be tricked by false certificate status
published 5 days ago
Summary
The cleanstart vault component does not correctly check the online certificate status responses it receives. This weakness could let an attacker present a fake response and make the system think a compromised certificate is still valid, opening the door to unauthorized access. Apply the vendor's update as soon as it is available and verify that certificate checks are correctly enforced.
What to do
- Update cleanstart vault to version 2.0.4-r4.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | vault |
< 2.0.4-r4 Fix: upgrade to 2.0.4-r4
|
Original advisory text
Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node
Security vulnerability affects the vault package. Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-AC87784 · OSV
Track software like this
Free during beta