65 matches found
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: step-issuer-fips, sftpgo, step, step-ca, telegraf, caddy, step-issuer, cloudflared, tkn-fips, dapr, rclone-fips, karma, kyverno-policy-reporter-ui, buf, tkn, dapr-fips, gogatekeeper, caddy-fips, rclone, gitness, kyverno-policy-reporter-ui-fips, step-ca-fips, step-fip...
GHSA-XCVF-46F4-XWXF vulnerabilities
Vulnerabilities for packages: caddy, sftpgo, step, step-issuer, step-ca, tkn, cloudflared, gogatekeeper, karma, buf, kyverno-policy-reporter-ui, gitness, rclone...
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: caddy, sftpgo, step, step-issuer, step-ca, tkn, cloudflared, gogatekeeper, karma, buf, kyverno-policy-reporter-ui, gitness, rclone...
CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-TM64574 Security fix for CVE-2026-30836 applied in: step 0.28.7-r3, step 0.29.0-r2, step-cli 0.27.5-r1, step-issuer 0.10.0-r0, step-issuer 0.10.1-r0, step-issuer 0.10.2-r0, step-issuer 0.9.11-r1
CVE-2026-30836 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OJ21892 Security fix for CVE-2026-25518 applied in: cert-manager-cmctl-fips 2.4.0-r2, percona-xtradb-cluster-operator 1.18.0-r1, percona-xtradb-cluster-operator-fips 1.18.0-r1, step-issuer 0.9.11-r1
CVE-2026-25518 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-EG40747 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the step-issuer package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
CLEANSTART-2026-QK25151 Previously, a channel registered in the mux's chanList is not usable until it is established
Multiple security vulnerabilities affect the step-issuer package. Previously, a channel registered in the mux's chanList is not usable until it is established. See references for individual vulnerability details...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: frankenphp-8.2, frankenphp-8.4, step-issuer-fips, frankenphp-8.3, caddy-fips, caddy, step-ca-fips, frankenphp-8.5...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, step-issuer-fips, cert-manager-google-cas-issuer, cert-manager-cmctl-fips, aws-privateca-issuer-fips, mariadb-operator, step-issuer, cert-manager-webhook-pdns-fips, gitlab-operator-fips, cert-manager-openshift-routes,...
GO-2024-3282 vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, step-issuer-fips, cert-exporter-fips, cert-manager-cmctl, cert-manager-webhook-pdns, step-issuer, cert-manager-cmctl-fips, cert-exporter, aws-privateca-issuer, aws-privateca-issuer-fips, cert-manager-webhook-pdns-fips...
GO-2025-4068 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
GO-2026-4458 vulnerabilities
Vulnerabilities for packages: step-issuer, step-ca, caddy, step...
GO-2025-3770 vulnerabilities
Vulnerabilities for packages: caddy, sftpgo, step, step-issuer, step-ca, tkn, cloudflared, gogatekeeper, karma, buf, kyverno-policy-reporter-ui, gitness, rclone...
GO-2024-3282 vulnerabilities
Vulnerabilities for packages: cert-manager-webhook-pdns, step-issuer, cert-exporter, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer...
GO-2026-4399 vulnerabilities
Vulnerabilities for packages: cert-manager-csi-driver, cert-manager-webhook-pdns, opentelemetry-operator, mariadb-operator, step-issuer, percona-server-mongodb-operator, cert-manager-istio-csr, cert-manager-cmctl, aws-privateca-issuer...
CLEANSTART-2026-QC69966 Security fixes in step-issuer 0.9.9-r1
Package step-issuer version 0.9.9-r1 fixes 10 vulnerabilities: CVE-2025-47912, CVE-2025-58183, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188...