CLEANSTART-2026-VS63883: Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method

Q: What must an attacker provide to trigger the issue?

The affected program must validate a certificate chain containing DSA public keys. The flaw is triggered during certificate-chain validation when an interface cast assumes the key implements an Equal method.

Q: What is the likely security impact?

Successful exploitation can cause the program to panic, resulting in a denial of service. The supplied vector indicates network reachability, low attack complexity, no required privileges, and no user interaction.

Q: Are confidentiality or integrity affected?

The provided severity vector identifies no confidentiality or integrity impact. The stated impact is limited to availability.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method.

Affected Software

1 affected componentFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2025-58188

Frequently Asked Questions

What must an attacker provide to trigger the issue?

The affected program must validate a certificate chain containing DSA public keys. The flaw is triggered during certificate-chain validation when an interface cast assumes the key implements an Equal method.

What is the likely security impact?

Successful exploitation can cause the program to panic, resulting in a denial of service. The supplied vector indicates network reachability, low attack complexity, no required privileges, and no user interaction.

Are confidentiality or integrity affected?

The provided severity vector identifies no confidentiality or integrity impact. The stated impact is limited to availability.

CLEANSTART-2026-VS63883: Validating certificate chains which contain DSA public keys can cause programs to panic, due to a interface cast that assumes they implement the Equal method

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the likely security impact?

Are confidentiality or integrity affected?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker provide to trigger the issue?

What is the likely security impact?

Are confidentiality or integrity affected?