Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Cleanstart NSS before version 3 lets attackers bypass security
published 4 days ago
Summary
The NSS library shipped with Cleanstart versions earlier than 3 can be tricked into accepting forged security credentials. This could allow an attacker to intercept or alter encrypted communications. Upgrade to NSS version 3 or later, or apply the vendor's recommended patches, to restore proper protection.
What to do
- Update cleanstart nss to version 3.73-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nss |
< 3.73-r0 Fix: upgrade to 3.73-r0
|
Original advisory text
NSS (Network Security Services) versions prior to 3
Security vulnerability affects the nss package. NSS (Network Security Services) versions prior to 3.
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-DG39550 · OSV
Track software like this
Free during beta