CLEANSTART-2026-LO65429: Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

Q: What would an attacker need to do to trigger the denial of service?

An attacker would need to supply crafted input that is transformed by the Nickname profile into a destination buffer that is too short. This can cause an out-of-bounds slice panic.

Q: Is authentication or user interaction required for exploitation?

No. The supplied vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What is the likely security impact?

The reported impact is availability only: triggering the panic can cause a denial of service. No confidentiality or integrity impact is indicated.

Published Nov 11, 2026

Updated

Security vulnerability affects the kubernetes package. The Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer.

Affected Software

2 affected componentsFixes available

cleanstart/kubernetes<1.34.11-r0

1.34.11-r0

cleanstart/kubernetes<1.34.13-r2

1.34.13-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kubernetes to a version that resolves this vulnerability.
Fixed in 1.34.11-r0
Upgrade
Upgrade cleanstart/kubernetes to a version that resolves this vulnerability.
Fixed in 1.34.13-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-56851

Frequently Asked Questions

What would an attacker need to do to trigger the denial of service?

An attacker would need to supply crafted input that is transformed by the Nickname profile into a destination buffer that is too short. This can cause an out-of-bounds slice panic.

Is authentication or user interaction required for exploitation?

No. The supplied vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction required.

What is the likely security impact?

The reported impact is availability only: triggering the panic can cause a denial of service. No confidentiality or integrity impact is indicated.

CLEANSTART-2026-LO65429: Nickname profile can panic with an out-of-bounds slice error when transforming crafted input into a short destination buffer

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What would an attacker need to do to trigger the denial of service?

Is authentication or user interaction required for exploitation?

What is the likely security impact?

Company

Resources

Contact

Frequently Asked Questions

What would an attacker need to do to trigger the denial of service?

Is authentication or user interaction required for exploitation?

What is the likely security impact?