CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: sftpgo, rclone, tkn-fips, kyverno-policy-reporter-ui-fips, step, dapr, kyverno-policy-reporter-ui, cloudflared, step-issuer, dapr-fips, caddy, karma, step-fips, caddy-fips, step-ca-fips, rclone-fips, step-issuer-fips, gogatekeeper, step-ca, buf, gitness, tkn, telegra...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: rclone, step, step-issuer, step-ca, kyverno-policy-reporter-ui, cloudflared, tkn, gitness, gogatekeeper, sftpgo, buf, caddy, karma...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: rclone, step, step-issuer, step-ca, kyverno-policy-reporter-ui, cloudflared, tkn, gitness, gogatekeeper, sftpgo, buf, caddy, karma...

CLEANSTART-2026-UC45945 Security fix for GHSA-rjr7-jggh-pgcp applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SZ57384 Security fix for GHSA-3fxj-6jh8-hvhx applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU46471 Security fix for GHSA-9g5q-2w5x-hmxf applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZK17836 Slack Nebula before 1

Security vulnerability affects the step-ca package. Slack Nebula before 1...

CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

CLEANSTART-2026-FB73701 Nebula is a scalable overlay networking tool

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

PT-2026-108398

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

PT-2026-108486

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

CLEANSTART-2026-HY04469 Security fix for GHSA-vrw8-fxc6-2r93 applied in: gitness 3.0.1-r0, gitness 3.1.1-r0, gitness 3.2.0-r0, step-ca 0.27.5-r0, step-cli 0.27.5-r1

GHSA-vrw8-fxc6-2r93 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: sftpgo, rclone, tkn-fips, kyverno-policy-reporter-ui-fips, step, dapr, kyverno-policy-reporter-ui, cloudflared, step-issuer, dapr-fips, caddy, karma, step-fips, caddy-fips, step-ca-fips, rclone-fips, step-issuer-fips, gogatekeeper, step-ca, buf, gitness, tkn, telegra...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-ca-fips, frankenphp-8.4, caddy-fips, frankenphp-8.3, frankenphp-8.2, frankenphp-8.5, step-issuer-fips, caddy...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer-fips, step-fips, caddy-fips, step, step-ca-fips, step-issuer, caddy...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer-fips, step-fips, caddy-fips, step, step-ca-fips, step-issuer, caddy...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step-ca, trillian, kots, wavefront-collector-for-kubernetes, argo-workflows, argo-workflows-fips, caddy-fips, trillian-fips, step, caddy...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: portieris, sriov-network-device-plugin, pulumi, opa-fips-envoy, portieris-fips, google-osconfig-agent, nfs-subdir-external-provisioner-fips, crossplane-provider-gcp, step, sriov-network-device-plugin-fips, opa, skaffold, smarter-device-manager, dgraph,...