PT-2026-42355 · Cleanstart · Atlantis

Published 2026-04-30 · Updated 2026-04-30

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Multiple security vulnerabilities affect the atlantis package. The CombinedMult function in the CIRCL ecc/p384 package (secp384r1 curve) produces an incorrect value for specific inputs. See references for individual vulnerability details.

Fix

Related Identifiers

CLEANSTART-2026-WG17155

Affected Products

Atlantis

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-1229 · Security Note
• https://osv.dev/vulnerability/CLEANSTART-2026-WG17155 · Vendor Advisory
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WG17155.json · Note
• https://osv.dev/vulnerability/ghsa-f6x5-jh6r-wrfv · Note
• https://osv.dev/vulnerability/ghsa-j5w8-q4qc-rx2x · Note
• https://osv.dev/vulnerability/CVE-2026-1229 · Note
• https://osv.dev/vulnerability/ghsa-q9hv-hpm4-hj6x · Note
• https://osv.dev/vulnerability/ghsa-wjrx-6529-hcj3 · Note