CLEANSTART-2026-FH65949: trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped
Published Nov 13, 2026
·Updated
Security vulnerability affects the trust-manager package. A trusted template author may have previously written a valid template wherein the use of the 'yield' keyword would not be correctly escaped.
Affected Software
1 affected componentFixes available
cleanstart/trust-manager<0.25.0-r1
0.25.0-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/trust-managerto a version that resolves this vulnerability.Fixed in 0.25.0-r1
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
Is this limited to templates created by untrusted users?
No. The issue concerns a previously valid template written by a trusted template author. The affected condition is the handling of the 'yield' keyword in that template.
2
What access and interaction conditions are indicated for exploitation?
The supplied CVSS vector indicates that no privileges are required and that user interaction is required. It also indicates network attack vector and a changed scope, with low confidentiality and integrity impact.