CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: karma, caddy-fips, kyverno-policy-reporter-ui, step-issuer, kyverno-policy-reporter-ui-fips, gogatekeeper, telegraf, caddy, tkn-fips, sftpgo, step-issuer-fips, gitness, dapr, buf, step-ca-fips, dapr-fips, cloudflared, step, rclone, tkn, step-fips, step-ca, rclone-fip...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: step, rclone, gogatekeeper, karma, tkn, cloudflared, step-ca, buf, kyverno-policy-reporter-ui, step-issuer, gitness, caddy, sftpgo...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: step, rclone, gogatekeeper, karma, tkn, cloudflared, step-ca, buf, kyverno-policy-reporter-ui, step-issuer, gitness, caddy, sftpgo...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: karma, caddy-fips, kyverno-policy-reporter-ui, step-issuer, kyverno-policy-reporter-ui-fips, gogatekeeper, telegraf, caddy, tkn-fips, sftpgo, step-issuer-fips, gitness, dapr, buf, step-ca-fips, dapr-fips, cloudflared, step, rclone, tkn, step-fips, step-ca, rclone-fip...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca-fips, caddy, caddy-fips, step-issuer-fips, step, step-issuer, step-fips, step-ca...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca-fips, caddy, caddy-fips, step-issuer-fips, step, step-issuer, step-fips, step-ca...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-ca-fips, caddy, caddy-fips, step-issuer-fips, frankenphp-8.2, frankenphp-8.4, frankenphp-8.5, frankenphp-8.3...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: kots, caddy, caddy-fips, trillian, step, argo-workflows-fips, wavefront-collector-for-kubernetes, trillian-fips, step-ca, argo-workflows...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sriov-network-device-plugin-fips, caddy-fips, flyte, kyverno-notation-aws, portieris-fips, opa, pulumi-language-yaml, spark-operator, crossplane-provider-gcp, step-issuer, pulumi-kubernetes-operator, pulumi-language-dotnet, cert-exporter, terraform-provider-google,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dagger, k3d, conftest, rqlite, spire-server, smarter-device-manager, k8sgpt, kargo, k3s, grafana-agent-operator, opentelemetry-collector-contrib, guac, k8sgpt-operator, dex, falcosidekick, melange, zot, sigstore-scaffolding, restic, opa, terragrunt, temporal,...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step, caddy, step-issuer, step-ca...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step, caddy, step-issuer, step-ca...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: step, rclone, gogatekeeper, karma, tkn, cloudflared, step-ca, buf, kyverno-policy-reporter-ui, step-issuer, gitness, caddy, sftpgo...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step, trillian, argo-workflows, step-ca, caddy, kots...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: step, temporal-server, kine, trillian, ferretdb, argo-workflows, src, step-ca, spicedb, amass, k3s, caddy, kube-bench, kots...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: flux-kustomize-controller, hugo, flux, spire-server, goreleaser, tkn, velero, trino, fluent-bit-plugin-loki, k8sgpt, secrets-store-csi-driver-provider-azure, hugo-extended, kubescape, sqlpad, timestamp-authority, grafana-agent-operator, nuclei,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-sql, k3d, flux-kustomize-controller, flux, rabbitmq-messaging-topology-operator, goreleaser, spire-server, tkn, vexctl, kargo, kubescape, neuvector-sigstore-interface, k3s, timestamp-authority, nuclei, opentelemetry-collector-contrib, guac,...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...