CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer-fips, cloudflared, buf, gitness, sftpgo, step, dapr, tkn-fips, dapr-fips, rclone-fips, tkn, step-ca, karma, telegraf, kyverno-policy-reporter-ui-fips, step-issuer, step-ca-fips, kyverno-policy-reporter-ui, gogatekeeper, rclone, caddy, step-fip...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: caddy, sftpgo, step, kyverno-policy-reporter-ui, buf, step-ca, step-issuer, tkn, gogatekeeper, cloudflared, karma, gitness, rclone...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: caddy, sftpgo, step, kyverno-policy-reporter-ui, buf, step-ca, step-issuer, tkn, gogatekeeper, cloudflared, karma, gitness, rclone...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: caddy-fips, step-issuer-fips, cloudflared, buf, gitness, sftpgo, step, dapr, tkn-fips, dapr-fips, rclone-fips, tkn, step-ca, karma, telegraf, kyverno-policy-reporter-ui-fips, step-issuer, step-ca-fips, kyverno-policy-reporter-ui, gogatekeeper, rclone, caddy, step-fip...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: caddy-fips, step, step-issuer, step-issuer-fips, step-ca-fips, caddy, step-fips, step-ca...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: caddy-fips, step, step-issuer, step-issuer-fips, step-ca-fips, caddy, step-fips, step-ca...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy-fips, frankenphp-8.2, step-issuer-fips, step-ca-fips, caddy, frankenphp-8.4, frankenphp-8.5, frankenphp-8.3...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: caddy-fips, step, trillian-fips, argo-workflows-fips, caddy, trillian, argo-workflows, kots, step-ca, wavefront-collector-for-kubernetes...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: caddy-fips, sigstore-scaffolding, step-issuer-fips, pulumi-language-dotnet, sigstore-scaffolding-fips, kube-bench-fips, kyverno, spark-operator-fips, crossplane-provider-gcp, opa, cert-exporter-fips, grafana-mimir, opa-envoy, portieris-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: temporal, terragrunt, terraform-provider-google, kubernetes-csi-driver-hostpath, guac, ksops, step-ca, zarf, kaniko, smarter-device-manager, terraform-docs, cilium-cli, melange, zot, rqlite, grafana-mimir, k8sgpt, kubernetes-csi-external-provisioner, gomplate,...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step-issuer, step...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step-issuer, step...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: caddy, sftpgo, step, kyverno-policy-reporter-ui, buf, step-ca, step-issuer, tkn, gogatekeeper, cloudflared, karma, gitness, rclone...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: caddy, step, step-ca, argo-workflows, trillian, kots...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: src, amass, caddy, spicedb, step, step-ca, trillian, temporal-server, k3s, ferretdb, argo-workflows, kine, kube-bench, kots...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: terragrunt, prometheus-operator, argo-events, flux, airflow, guac, ksops, druid, step-ca, policy-controller, chezmoi, up, zarf, cortex, wal-g, goreleaser, secrets-store-csi-driver-provider-azure, timestamp-authority, hugo-extended, zot, grafana-mimir, k8sgpt, rclone,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: terragrunt, actions-runner-controller, argo-events, kubernetes-event-exporter, crossplane-provider-azure-authorization, flux, guac, ksops, step-ca, scorecard, policy-controller, zarf, glab, flux-image-automation-controller, rabbitmq-messaging-topology-operator, vexct...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...