Vulnerability from cleanstart
Published
2026-09-08 02:00
Modified
2026-09-07 06:23
Summary
Previously, a channel registered in the mux's chanList is not usable until it is established
Details

Multiple security vulnerabilities affect the trust-manager package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details.

References
https://github.com/cleanstart-dev/cleanstart-secu… ADVISORY
https://osv.dev/vulnerability/CVE-2025-61729 WEB
https://osv.dev/vulnerability/CVE-2026-25679 WEB
https://osv.dev/vulnerability/CVE-2026-25680 WEB
https://osv.dev/vulnerability/CVE-2026-25681 WEB
https://osv.dev/vulnerability/CVE-2026-27136 WEB
https://osv.dev/vulnerability/CVE-2026-27137 WEB
https://osv.dev/vulnerability/CVE-2026-27138 WEB
https://osv.dev/vulnerability/CVE-2026-27142 WEB
https://osv.dev/vulnerability/CVE-2026-27145 WEB
https://osv.dev/vulnerability/CVE-2026-33818 WEB
https://osv.dev/vulnerability/CVE-2026-39821 WEB
https://osv.dev/vulnerability/CVE-2026-42502 WEB
https://osv.dev/vulnerability/CVE-2026-42504 WEB
https://osv.dev/vulnerability/CVE-2026-42506 WEB
https://osv.dev/vulnerability/CVE-2026-42507 WEB
https://osv.dev/vulnerability/CVE-2026-46600 WEB
https://osv.dev/vulnerability/CVE-2026-56853 WEB
https://osv.dev/vulnerability/CVE-2026-56854 WEB
https://osv.dev/vulnerability/CVE-2026-56855 WEB
https://osv.dev/vulnerability/CVE-2026-56858 WEB
https://osv.dev/vulnerability/CVE-2026-56859 WEB
https://osv.dev/vulnerability/CVE-2026-56860 WEB
https://osv.dev/vulnerability/CVE-2026-56862 WEB
https://osv.dev/vulnerability/CVE-2026-78662 WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-61729 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-25680 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27136 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27137 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27138 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27142 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-39821 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42502 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42506 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42507 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-46600 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56854 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56855 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-78662 WEB

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "trust-manager"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.22.1-r4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Multiple security vulnerabilities affect the trust-manager package. Previously, a channel registered in the mux\u0027s chanList is not usable until it is established. See references for individual vulnerability details.",
  "id": "CLEANSTART-2026-MK94759",
  "modified": "2026-09-07T06:23:09Z",
  "published": "2026-09-08T02:00:42.688438Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MK94759.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2025-61729"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25679"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25680"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25681"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27136"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27137"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27138"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27142"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27145"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-33818"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-39821"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42502"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42504"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42506"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42507"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-46600"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56853"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56854"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56855"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56858"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56859"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56860"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56862"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-78662"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27138"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56855"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78662"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Previously, a channel registered in the mux\u0027s chanList is not usable until it is established",
  "upstream": [
    "CVE-2025-61729",
    "CVE-2026-25679",
    "CVE-2026-25680",
    "CVE-2026-25681",
    "CVE-2026-27136",
    "CVE-2026-27137",
    "CVE-2026-27138",
    "CVE-2026-27142",
    "CVE-2026-27145",
    "CVE-2026-33818",
    "CVE-2026-39821",
    "CVE-2026-42502",
    "CVE-2026-42504",
    "CVE-2026-42506",
    "CVE-2026-42507",
    "CVE-2026-46600",
    "CVE-2026-56853",
    "CVE-2026-56854",
    "CVE-2026-56855",
    "CVE-2026-56858",
    "CVE-2026-56859",
    "CVE-2026-56860",
    "CVE-2026-56862",
    "CVE-2026-78662"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.


Loading…