CVE-2026-15664: Improper Neutralization of Input During Web Page Generation

The Quill Forms | Conversational Multi Step Forms, Surveys & quizzes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Multiple Choice 'Other' Value in all versions up to, and including, 5.7.1 due to insufficient input sanitization and output escaping. This makes it possible f...

CLEANSTART-2026-PQ02087 Security fix for CVE-2025-62820 applied in: step 0.28.7-r0, step 0.28.7-r2, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-cli 0.28.7-r0, step-issuer 0.9.9-r0, step-issuer-fips 0.9.11-r1

CVE-2025-62820 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2025-CI91808 Security fix for ghsa-j7c9-79x7-8hpm applied in: step-issuer-fips 0.9.9-r1

Security vulnerability affects the step-issuer-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-KX60703 Security fix for ghsa-x6fh-7qmf-69xh applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r1

ghsa-x6fh-7qmf-69xh affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RS62088 Security fix for ghsa-j7c9-79x7-8hpr applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3

ghsa-j7c9-79x7-8hpr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZH50133 Security fix for ghsa-h8cp-697h-8c8p applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3

ghsa-h8cp-697h-8c8p affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1

CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1

CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-JI14170 Security fix for ghsa-q4r8-xm5f-56gw applied in: step-cli 0.27.5-r0, step-issuer 0.10.0-r0, step-issuer 0.10.1-r0

ghsa-q4r8-xm5f-56gw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TM64574 Security fix for CVE-2026-30836 applied in: step 0.28.7-r3, step 0.29.0-r2, step-cli 0.27.5-r1, step-issuer 0.10.0-r0, step-issuer 0.10.1-r0, step-issuer 0.10.2-r0, step-issuer 0.9.11-r1

CVE-2026-30836 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1

CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-HY04469 Security fix for ghsa-vrw8-fxc6-2r93 applied in: gitness 3.0.1-r0, gitness 3.1.1-r0, gitness 3.2.0-r0, step-ca 0.27.5-r0, step-cli 0.27.5-r1

ghsa-vrw8-fxc6-2r93 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-VL17238 Security fix for CVE-2026-33815 applied in: argo-workflows 4.0.4-r1, cloudnative-pg 1.26.3-r1, cloudnative-pg-fips 1.25.4-r4, cloudnative-pg-fips 1.27.3-r3, cloudnative-pg-fips 1.28.1-r3, jitsucom-bulker 2.10.0-r2, jitsucom-bulker 2.11.0-r1, jitsucom-bulker 2.8.6-r0, jitsucom-bulker 2.9.0-r0, keda 2.19.0-r3, keda-fips 2.18.3-r3, kube-bench 0.15.0-r0, openbao-fips 2.3.2-r6, openbao-fips 2.4.4-r6, step 0.29.0-r0, step 0.30.2-r1, step-cli 0.27.5-r1, step-issuer 0.10.2-r1, step-issuer 0.9.11-r1, temporal 1.5.1-r0, temporal-server 1.29.6-r0, temporal-server 1.30.4-r0, temporal-server 1.31.0.153.3-r0, temporal-server-fips 1.29.6-r0, temporal-server-fips 1.31.0.153.1-r0

CVE-2026-33815 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DO54413 Security fix for ghsa-mpwr-8vm7-h73f applied in: cert-manager 1.19.2-r2, cert-manager 1.19.6-r1, cert-manager 1.20.3-r2, external-secrets 2.3.0-r1, external-secrets-fips 2.7.0-r1, external-secrets-operator 2.5.0-r3, external-secrets-operator 2.6.0-r3, grafana 13.1.0-r1, step 0.29.0-r0, step 0.30.2-r0, step-cli 0.30.6-r0, trust-manager 0.20.3-r1, trust-manager 0.21.1-r1, vault 1.19.5-r1

ghsa-mpwr-8vm7-h73f affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZW76652 Security fix for ghsa-xgrm-4fwx-7qm8 applied in: cloudnative-pg 1.26.3-r1, step-cli 0.27.5-r0

ghsa-xgrm-4fwx-7qm8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XI53576 Security fix for CVE-2026-25793 applied in: step 0.28.7-r3, step 0.29.0-r2, step-ca 0.27.5-r0, step-cli 0.27.5-r1, step-issuer 0.10.2-r0, step-issuer 0.9.11-r1

CVE-2026-25793 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZG76614 Security fix for ghsa-69x3-g4r3-p962 applied in: step-cli 0.27.5-r0

Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LF51380 Security fix for ghsa-9qq8-cgcv-qmc9 applied in: step-cli 0.27.5-r0

Security vulnerability affects the step-cli package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-XI87503 Security fix for CVE-2026-40097 applied in: step 0.28.7-r3, step 0.29.0-r2, step-cli 0.27.5-r1, step-issuer 0.9.11-r1

CVE-2026-40097 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...