CLEANSTART-2026-OE82205: On most platforms, Go uses the given system root certificates
Published Nov 13, 2026
·Updated
CVE-2026-111943 affects multiple packages. On most platforms, Go uses the given system root certificates. See references for individual vulnerability details.
Affected Software
2 affected componentsFixes available
cleanstart/knative-serving<1.23.0-r5
1.23.0-r5
cleanstart/trust-manager<0.25.0-r1
0.25.0-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/knative-servingto a version that resolves this vulnerability.Fixed in 1.23.0-r5 - Upgrade
Upgrade
cleanstart/trust-managerto a version that resolves this vulnerability.Fixed in 0.25.0-r1
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionAffected Software
Frequently Asked Questions
1
Which CleanStart components are listed as affected?
The affected software entries are cleanstart/knative-serving and cleanstart/trust-manager.
2
Where can I find package-specific vulnerability details?
The referenced CleanStart advisory, OSV record for CVE-2026-111943, and NVD record provide the individual vulnerability details.