Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.5
cleanstart/kubernetes may run out of memory decoding deep data
published 5 days ago
Summary
The Kubernetes code used by cleanstart can consume all stack space when it tries to read highly nested or recursive information. This could cause the application to stop working or crash. Update to the latest version where a limit on recursion depth has been added, or apply the provided patch to prevent the issue.
What to do
- Update cleanstart kubernetes to version 1.36.3-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kubernetes |
< 1.36.3-r2 Fix: upgrade to 1.36.3-r2
|
Original advisory text
Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures
Security vulnerability affects the kubernetes package. Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-FI96780 · OSV
Track software like this
Free during beta