CLEANSTART-2026-KE54242: On most platforms, Go uses the given system root certificates

Q: Which certificate trust store is relevant when assessing an affected deployment?

On most platforms, Go uses the system root certificates provided to it. Review the system root certificate set used by the haproxy-ingress deployment.

Q: Does the advisory identify specific affected versions or a patch version?

No affected version range, fixed version, or mitigation is provided in the available advisory data.

Published Nov 3, 2026

Updated

Security vulnerability affects the haproxy-ingress package. On most platforms, Go uses the given system root certificates.

Affected Software

1 affected componentFixes available

cleanstart/haproxy-ingress<0.15.6-r2

0.15.6-r2

Event History

Nov 3, 2026

Advisory Published

via OSV·12:39 AM

Data Sourced

via OSV·12:39 AM

DescriptionAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-111943

Frequently Asked Questions

Which certificate trust store is relevant when assessing an affected deployment?

On most platforms, Go uses the system root certificates provided to it. Review the system root certificate set used by the haproxy-ingress deployment.

Does the advisory identify specific affected versions or a patch version?

No affected version range, fixed version, or mitigation is provided in the available advisory data.

CLEANSTART-2026-KE54242: On most platforms, Go uses the given system root certificates

Affected Software

Event History

Child vulnerabilities

Frequently Asked Questions

Which certificate trust store is relevant when assessing an affected deployment?

Does the advisory identify specific affected versions or a patch version?

Company

Resources

Contact

Frequently Asked Questions

Which certificate trust store is relevant when assessing an affected deployment?

Does the advisory identify specific affected versions or a patch version?