CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, step-fips, step-issuer-fips, caddy-fips, step-ca-fips, step-issuer, caddy, step...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, step-fips, step-issuer-fips, caddy-fips, step-ca-fips, step-issuer, caddy, step...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: sftpgo, gitness, gogatekeeper, dapr, caddy-fips, step-ca-fips, rclone, step-issuer, telegraf, kyverno-policy-reporter-ui-fips, cloudflared, kyverno-policy-reporter-ui, dapr-fips, step-ca, karma, step-issuer-fips, tkn, caddy, rclone-fips, step, step-fips, tkn-fips, bu...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, frankenphp-8.4, frankenphp-8.3, step-issuer-fips, caddy-fips, step-ca-fips, frankenphp-8.2, caddy...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step-ca, argo-workflows-fips, wavefront-collector-for-kubernetes, trillian-fips, trillian, caddy-fips, kots, caddy, step, argo-workflows...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi-kubernetes-operator, smarter-device-manager, kyverno-notation-aws-fips, crossplane-provider-gcp, caddy-fips, sigstore-scaffolding, skaffold, portieris, step-ca-fips, step-issuer, kyverno-notation-aws, spark-operator, cluster-proportional-autoscaler-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: melange, fulcio, opentelemetry-collector, kots, cert-manager-cmctl, certificate-transparency, kubernetes-csi-external-provisioner, spire-server, osv-scanner, cloudnative-pg, dagger, gomplate, kubernetes-csi-driver-hostpath, pulumi-language-dotnet, dbmate, spegel,...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, step, step-issuer, caddy...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, step, step-issuer, caddy...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gogatekeeper, gitness, sftpgo, karma, tkn, caddy, kyverno-policy-reporter-ui, cloudflared, step-ca, step, step-issuer, rclone, buf...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian, kots, caddy, argo-workflows, step-ca, step...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: kube-bench, trillian, kots, temporal-server, k3s, ferretdb, caddy, argo-workflows, step-ca, kine, spicedb, step, amass, src...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: fulcio, opentelemetry-collector, up, boring-registry, py3-azure-identity, velero, druid, spire-server, hugo, restic, airflow, flyte, opentelemetry-collector-contrib, rook, zot, grafana-agent-operator, goreleaser, bank-vaults, sqlpad, rekor, thanos, zarf,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: fulcio, flux-helm-controller, crossplane-provider-azure-authorization, opentelemetry-collector, snyk-cli, neuvector-sigstore-interface, kubernetes-event-exporter, spire-server, gomplate, rabbitmq-messaging-topology-operator, crossplane-provider-azure, skopeo, rook,...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kubernetes-ingress-defaultbackend, dive, athenz-cert-manager-issuer-fips, git-sync-fips, helm-operator-fips, kubeflow-pipelines-driver-fips, crossplane-provider-aws-lexmodels-fips, longhorn-backing-image-manager, falco-no-driver,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: rke2-runtime, sftpgo, opentelemetry-collector-contrib-fips, kuma, jitsucom-bulker, sqlexporter, grafana-alloy, step-issuer, certificate-transparency, src, openbao-fips, gitlab-kas-fips, sqlexporter-fips, ory-kratos-fips, gitaly, teleport, gitaly-fips,...