Affected: CleanStart: consul

Security vulnerability affects the consul package. SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.

Affected: CleanStart: consul

Security vulnerability affects the consul package. The html.

Affected: CleanStart: consul

Security vulnerability affects the consul package. The html.

Affected: CleanStart: consul

CVE-2026-33186 affects multiple packages. gRPC-Go is the Go language implementation of gRPC. See references for individual vulnerability details.

Affected: CleanStart: consul

Security vulnerability affects the consul package. SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

Affected: CleanStart: consul

Security vulnerability affects the consul package. SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

Affected: CleanStart: consul

Security vulnerability affects the consul package. OpenTelemetry-Go is the Go implementation of OpenTelemetry.

Affected: CleanStart: consul

CVE-2025-65637 affects multiple packages. A denial-of-service vulnerability exists in github. See references for individual vulnerability details.

Affected: CleanStart: consul, CleanStart: cosign

ghsa-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

Affected: CleanStart: consul

Security vulnerability affects the consul package. This issue is resolved in later releases. See references for vulnerability details.