GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration
Vulnerability from cleanstart
Published
2026-09-08 02:00
Modified
2026-09-07 06:23
Summary
Previously, a channel registered in the mux's chanList is not usable until it is established
Details

Multiple security vulnerabilities affect the trust-manager package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details.

References
https://github.com/cleanstart-dev/cleanstart-secu… ADVISORY
https://osv.dev/vulnerability/CVE-2025-61729 WEB
https://osv.dev/vulnerability/CVE-2026-25679 WEB
https://osv.dev/vulnerability/CVE-2026-25680 WEB
https://osv.dev/vulnerability/CVE-2026-25681 WEB
https://osv.dev/vulnerability/CVE-2026-27136 WEB
https://osv.dev/vulnerability/CVE-2026-27137 WEB
https://osv.dev/vulnerability/CVE-2026-27138 WEB
https://osv.dev/vulnerability/CVE-2026-27142 WEB
https://osv.dev/vulnerability/CVE-2026-27145 WEB
https://osv.dev/vulnerability/CVE-2026-33818 WEB
https://osv.dev/vulnerability/CVE-2026-39821 WEB
https://osv.dev/vulnerability/CVE-2026-42502 WEB
https://osv.dev/vulnerability/CVE-2026-42504 WEB
https://osv.dev/vulnerability/CVE-2026-42506 WEB
https://osv.dev/vulnerability/CVE-2026-42507 WEB
https://osv.dev/vulnerability/CVE-2026-46600 WEB
https://osv.dev/vulnerability/CVE-2026-56853 WEB
https://osv.dev/vulnerability/CVE-2026-56854 WEB
https://osv.dev/vulnerability/CVE-2026-56855 WEB
https://osv.dev/vulnerability/CVE-2026-56858 WEB
https://osv.dev/vulnerability/CVE-2026-56859 WEB
https://osv.dev/vulnerability/CVE-2026-56860 WEB
https://osv.dev/vulnerability/CVE-2026-56862 WEB
https://osv.dev/vulnerability/CVE-2026-78662 WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-61729 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-25679 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-25680 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-25681 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27136 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27137 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27138 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27142 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-27145 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-33818 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-39821 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42502 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42504 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42506 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-42507 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-46600 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56853 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56854 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56855 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56858 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56859 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56860 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-56862 WEB
https://nvd.nist.gov/vuln/detail/CVE-2026-78662 WEB

{
  "affected": [
    {
      "package": {
        "ecosystem": "CleanStart",
        "name": "trust-manager"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "0.22.1-r4"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "credits": [],
  "database_specific": {},
  "details": "Multiple security vulnerabilities affect the trust-manager package. Previously, a channel registered in the mux\u0027s chanList is not usable until it is established. See references for individual vulnerability details.",
  "id": "CLEANSTART-2026-MK94759",
  "modified": "2026-09-07T06:23:09Z",
  "published": "2026-09-08T02:00:42.688438Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MK94759.json"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2025-61729"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25679"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25680"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-25681"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27136"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27137"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27138"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27142"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-27145"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-33818"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-39821"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42502"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42504"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42506"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-42507"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-46600"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56853"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56854"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56855"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56858"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56859"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56860"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-56862"
    },
    {
      "type": "WEB",
      "url": "https://osv.dev/vulnerability/CVE-2026-78662"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-61729"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25679"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25680"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27138"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27142"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42506"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56854"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56855"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
    },
    {
      "type": "WEB",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-78662"
    }
  ],
  "related": [],
  "schema_version": "1.7.3",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Previously, a channel registered in the mux\u0027s chanList is not usable until it is established",
  "upstream": [
    "CVE-2025-61729",
    "CVE-2026-25679",
    "CVE-2026-25680",
    "CVE-2026-25681",
    "CVE-2026-27136",
    "CVE-2026-27137",
    "CVE-2026-27138",
    "CVE-2026-27142",
    "CVE-2026-27145",
    "CVE-2026-33818",
    "CVE-2026-39821",
    "CVE-2026-42502",
    "CVE-2026-42504",
    "CVE-2026-42506",
    "CVE-2026-42507",
    "CVE-2026-46600",
    "CVE-2026-56853",
    "CVE-2026-56854",
    "CVE-2026-56855",
    "CVE-2026-56858",
    "CVE-2026-56859",
    "CVE-2026-56860",
    "CVE-2026-56862",
    "CVE-2026-78662"
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…

Loading…