GO-2026-4399
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
At a glance
- Published
- Updated
- CVE
- CVE-2026-25518
- Aliases
- BIT-cert-manager-2026-25518, GHSA-gx3x-vq4p-mhhv
Description
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/cert-manager/cert-manager | introduced 1.18.0, fixed 1.18.5, introduced 1.19.0, fixed 1.19.3 |
References
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-gx3x-vq4p-mhhv ADVISORY
- https://github.com/cert-manager/cert-manager/commit/409fc24e539711a07aae45ed45abbe03dfdad2cc FIX
- https://github.com/cert-manager/cert-manager/commit/9a73a0b3853035827edd37ac463e4803ba10327d FIX
- https://github.com/cert-manager/cert-manager/commit/d4faed26ae12115cceb807cdc12507ebc28980e2 FIX
- https://github.com/cert-manager/cert-manager/pull/8467 FIX
- https://github.com/cert-manager/cert-manager/pull/8468 FIX
- https://github.com/cert-manager/cert-manager/pull/8469 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |