CLEANSTART-2026-QV51661: When http
Published Nov 13, 2026
·Updated
Security vulnerability affects the trust-manager package. When http.
Affected Software
1 affected componentFixes available
cleanstart/trust-manager<0.25.0-r1
0.25.0-r1
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/trust-managerto a version that resolves this vulnerability.Fixed in 0.25.0-r1
Event History
Nov 13, 2026
Advisory Published
via OSV·12:37 AM
Data Sourced
via OSV·12:37 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What does an attacker need to exploit this issue?
The reported vector indicates network access is sufficient. Exploitation has low attack complexity and does not require prior privileges or user interaction.
2
What is the expected security impact if exploitation succeeds?
The reported impact is high confidentiality impact. No integrity or availability impact is indicated by the supplied vector.