CLEANSTART-2026-YX72294: go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP
Published Nov 14, 2026
·Updated
Security vulnerability affects the yunikorn-k8shim package. go-ntlmssp is a Go package that provides NTLM/Negotiate authentication over HTTP.
Affected Software
1 affected componentFixes available
cleanstart/yunikorn-k8shim<1.8.0-r4
1.8.0-r4
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
cleanstart/yunikorn-k8shimto a version that resolves this vulnerability.Fixed in 1.8.0-r4
Frequently Asked Questions
1
Does exploitation require authentication or user interaction?
No. The recorded CVSS vector indicates network-reachable exploitation with low attack complexity, no privileges required, and no user interaction.
2
What is the expected security impact?
The vulnerability is rated high severity with a CVSS score of 7.5. The stated impact is high availability impact, with no recorded confidentiality or integrity impact.