CLEANSTART-2026-XL70757 Security fixes in step 0.29.0-r1

Package step version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-42505, CVE-2026-39822...

CLEANSTART-2026-OQ54601 Security fixes in step-cli 0.29.0-r0

Package step-cli version 0.29.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-XV94605 Security fixes in step-issuer 0.12.0-r0

Package step-issuer version 0.12.0-r0 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-DP50592 Security fixes in step-issuer 0.10.2-r2

Package step-issuer version 0.10.2-r2 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-NH70338 Security fixes in step 0.29.0-r0

Package step version 0.29.0-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-IZ98962 Security fixes in step 0.30.2-r0

Package step version 0.30.2-r0 fixes 3 vulnerabilities: CVE-2026-27145, CVE-2026-42504, ghsa-mpwr-8vm7-h73f...

CLEANSTART-2026-QC69966 Security fixes in step-issuer 0.9.9-r1

Package step-issuer version 0.9.9-r1 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...

CLEANSTART-2026-NS77369 Security fixes in step 0.30.0-r0

Package step version 0.30.0-r0 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-XA28320 Security fixes in step 0.30.2-r2

Package step version 0.30.2-r2 fixes 2 vulnerabilities: CVE-2026-34986, CVE-2026-34986...

CLEANSTART-2026-YW87628 Security fixes in step 0.28.7-r2

Package step version 0.28.7-r2 fixes 6 vulnerabilities: CVE-2026-46600, CVE-2026-56852, CVE-2026-39822, CVE-2026-42505, CVE-2025-66406...

CLEANSTART-2026-UR44491 Security fixes in step-issuer 0.10.1-r0

Package step-issuer version 0.10.1-r0 fixes 4 vulnerabilities: CVE-2026-30836, CVE-2026-33186, ghsa-q4r8-xm5f-56gw, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3

Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...

CLEANSTART-2026-GI36891 Security fixes in step-issuer 0.9.9-r0

Package step-issuer version 0.9.9-r0 fixes 1 vulnerabilities: CVE-2025-62820...

CLEANSTART-2026-TB76607 Security fixes in step 0.28.7-r0

Package step version 0.28.7-r0 fixes 1 vulnerabilities: CVE-2025-62820...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

Temporal Poisoning: Clean-Label Backdoors Via Event Redistribution in SNNs

Backdoor attacks on Spiking Neural Networks SNNs have primarily assumed dirty-label poisoning, in which triggered training samples are relabeled to an attacker-selected class. We study clean-label temporal poisoning, where a fixed timestamp transformation is applied only to the target-class...

PT-2026-86091

Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...

CVE-2026-64555

A flaw was found in the Linux kernel's Kernel-based Virtual Machine KVM for ARM64 architecture, specifically affecting nested virtualization. The kvmhyphandlemops function, responsible for handling certain virtualization operations, incorrectly restored the SPSREL2 register. This occurred because...

GHSA-VX7X-VCC2-C44G datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding

Summary datamodel-code-generator's anti-SSRF guard validates the resolved IP of a fetch target once and then lets httpx perform its own independent DNS resolution to connect, so the validated address is never pinned. A hostname that resolves to a public IP at validation time and a private IP at...