16 matches found
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: buf, dapr-fips, step-issuer-fips, caddy-fips, karma, step-ca-fips, step-issuer, kyverno-policy-reporter-ui, step-fips, gitness, rclone-fips, gogatekeeper, tkn-fips, step-ca, caddy, kyverno-policy-reporter-ui-fips, step, telegraf, sftpgo, rclone, cloudflared, dapr, tk...
CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy, step-issuer-fips, frankenphp-8.4, frankenphp-8.2, step-ca-fips, frankenphp-8.5, frankenphp-8.3...
CLEANSTART-2026-DE61610 Security fixes in step-issuer-fips 0.9.9-r2
Package step-issuer-fips version 0.9.9-r2 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-DJ44755 Security fixes in aws-privateca-issuer-fips 1.7.0-r1
Package aws-privateca-issuer-fips version 1.7.0-r1 fixes 23 vulnerabilities: CVE-2026-39820, CVE-2026-25679, CVE-2026-42499, CVE-2026-33814, CVE-2026-27143...
CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
CLEANSTART-2026-CD71342 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 1.7.0-r0, 1.7.0-r1
Multiple security vulnerabilities affect the aws-privateca-issuer-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-Q4R8-XM5F-56GW vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy, step-issuer-fips, frankenphp-8.4, frankenphp-8.2, step-ca-fips, frankenphp-8.5, frankenphp-8.3...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: caddy-fips, caddy, step-issuer-fips, frankenphp-8.4, frankenphp-8.2, step-ca-fips, frankenphp-8.5, frankenphp-8.3...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy, sops, terraform-provider-grafana-fips, crossplane-provider-aws-s3, crossplane-provider-aws-rds, crossplane-provider-aws-sns, crossplane-provider-aws-ecr-fips, sops-fips, linkerd2, opa, crossplane-provider-aws-s3-fips,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-xtradb-cluster-operator, cert-manager-istio-csr, step-issuer-fips, cert-manager-google-cas-issuer-fips, cert-manager-openshift-routes-fips, cert-manager-cmctl, mariadb-operator-fips, gitlab-operator, aws-privateca-issuer, cert-manager-csi-driver,...
CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...
GHSA-GHW8-3XQW-HHCJ vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, cert-exporter, cert-manager-cmctl, step-issuer-fips, cert-exporter-fips, cert-manager-webhook-pdns, aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, step-issuer...