Vulnerability GO-2026-4399
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
8 months ago
February 19, 2026 at 05:28 PM UTC
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2
Summary
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
Details
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
1 day ago
cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
v1.18.0 - v1.19.5 and v1.20.0-alpha.0 - v1.20.2 GHSA-8rvj-mm4h-c258
v1.18.0 - v1.19.5 and v1.20.0-alpha.0 - v1.20.2 GHSA-8rvj-mm4h-c258
Medium Risk
9 months ago
cert-manager-controller DoS via Specially Crafted DNS Response
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2 GHSA-gx3x-vq4p-mhhv
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2 GHSA-gx3x-vq4p-mhhv
Unknown
1 year ago
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1 GO-2024-3282
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1 GO-2024-3282
Medium Risk
1 year ago
cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1 GHSA-r4pg-vg54-wxx4
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1 GHSA-r4pg-vg54-wxx4
Impacted packages
Timeline
Published
8 months ago
February 19, 2026 at 05:28 PM UTC
Fixed (v1.18.5)
9 months ago
February 02, 2026 at 01:05 PM UTC
Fixed (v1.19.3)
9 months ago
February 02, 2026 at 01:05 PM UTC
Last Modified
7 months ago
March 16, 2026 at 02:55 PM UTC