fulcio

Fulcio A Free-to-Use CA For Code Signing Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect OIDC identity, such as email address. Fulcio only issues short-lived certificates that are valid for 10 minutes. Public Instance Fulcio is in General...

CLEANSTART-2026-VD81951 Security fixes in fulcio-fips 1.6.6-r3

Package fulcio-fips version 1.6.6-r3 fixes 7 vulnerabilities: CVE-2026-41178, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-24137, CVE-2026-39821...

CLEANSTART-2026-YS51990 Security fixes in fulcio 1.6.6-r0

Package fulcio version 1.6.6-r0 fixes 1 vulnerabilities: ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-VR52142 Security fixes in fulcio-fips 1.5.1-r2

Package fulcio-fips version 1.5.1-r2 fixes 10 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-GO54646 Security fixes in fulcio-fips 1.6.6-r2

Package fulcio-fips version 1.6.6-r2 fixes 12 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-GH46550 Security fixes in fulcio 1.8.8-r2

Package fulcio version 1.8.8-r2 fixes 3 vulnerabilities: CVE-2026-33186, ghsa-hrxh-6v49-42gf, CVE-2026-56854...

CLEANSTART-2026-XV09943 Security fixes in fulcio 1.5.1-r0

Package fulcio version 1.5.1-r0 fixes 5 vulnerabilities: CVE-2025-27144, CVE-2026-34986, CVE-2025-30204, CVE-2026-41178, ghsa-hrxh-6v49-42gf...

CLEANSTART-2026-YQ91884 Security fixes in fulcio-fips 1.5.1-r1

Package fulcio-fips version 1.5.1-r1 fixes 17 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-ZL88859 Security fixes in fulcio-fips 1.7.1-r2

Package fulcio-fips version 1.7.1-r2 fixes 28 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-PI22638 Security fixes in fulcio-fips 1.7.1-r1

Package fulcio-fips version 1.7.1-r1 fixes 16 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-OY64033 Security fixes in fulcio-fips 1.5.1-r3

Package fulcio-fips version 1.5.1-r3 fixes 11 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

CLEANSTART-2026-RR90170 Security fixes in fulcio-fips 1.7.1-r3

Package fulcio-fips version 1.7.1-r3 fixes 25 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-DA82476 Security fixes in fulcio 1.7.1-r0

Package fulcio version 1.7.1-r0 fixes 6 vulnerabilities: CVE-2025-11065, CVE-2026-41178, CVE-2025-52893, ghsa-hrxh-6v49-42gf, ghsa-2464-8j7c-4cjm...

CLEANSTART-2026-QC31357 Security fixes in fulcio-fips 1.6.6-r1

Package fulcio-fips version 1.6.6-r1 fixes 16 vulnerabilities: CVE-2026-33818, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860...

GO-2024-2883 vulnerabilities

Vulnerabilities for packages: grafana-mimir, cortex, prometheus-alertmanager, fulcio, timestamp-authority, rekor...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: opa, kubernetes-csi-external-provisioner, certificate-transparency, k3s, kube-rbac-proxy, melange, restic, spire-server, vcluster, fulcio, dagger, spicedb, sigstore-scaffolding, k8sgpt-operator, rqlite, gomplate, kubernetes-csi-driver-hostpath, k8sgpt,...

GO-2026-4394 vulnerabilities

Vulnerabilities for packages: cortex, restic, k3s, secrets-store-csi-driver-provider-gcp, policy-controller, dkron, sftpgo, aws-node-termination-handler, trivy-operator, kyverno, gcp-compute-persistent-disk-csi-driver, descheduler, cass-operator, datadog-agent, azuredisk-csi, opencost,...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: bank-vaults, cortex, fluent-bit-plugin-loki, pulumi, falcoctl, restic, buildkitd, goreleaser, hugo, rook, spire-server, policy-controller, up, fulcio, trino, timestamp-authority, sigstore-scaffolding, argo-workflows, druid, harbor-registry, k8sgpt, wal-g,...

GO-2025-4007 vulnerabilities

Vulnerabilities for packages: mockery, restic, yunikorn-web, secrets-store-csi-driver-provider-gcp, aws-node-termination-handler, kind, wazero, harbor-registry, speedtest-go, smokescreen, velero-plugin-for-aws, vault-k8s, k3d, cri-tools, gobump, cue, openbao-k8s, prometheus-pushgateway,...

GO-2023-2334 vulnerabilities

Vulnerabilities for packages: aactl, spire-server, fulcio, vexctl, argo-workflows, oauth2-proxy, flux-source-controller, tkn, cosign, flux-kustomize-controller, rekor, kubescape, dex, sops, cloudflared, kots, tekton-chains, gitsign, terragrunt, slsa-verifier...