CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, caddy-fips, step, caddy, step-issuer, step-ca-fips, step-ca, step-fips...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, step, gogatekeeper, tkn-fips, buf, dapr, caddy, step-ca, rclone, cloudflared, step-issuer, step-ca-fips, karma, kyverno-policy-reporter-ui, rclone-fips, kyverno-policy-reporter-ui-fips, caddy-fips, dapr-fips, gitness, telegraf, tkn, step-fips, sftpg...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, caddy-fips, step, caddy, step-issuer, step-ca-fips, step-ca, step-fips...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, step-issuer-fips, caddy-fips, frankenphp-8.2, frankenphp-8.4, caddy, step-ca-fips, frankenphp-8.5...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: caddy-fips, step, kots, caddy, trillian, step-ca, argo-workflows, argo-workflows-fips, trillian-fips, wavefront-collector-for-kubernetes...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, flyte, step, kyverno, kubeflow-fips, flux-image-reflector-controller-fips, crossplane-provider-gcp, sigstore-scaffolding, smarter-device-manager-fips, sigstore-scaffolding-fips, portieris-fips, sriov-network-device-plugin, kyverno-notation-aws-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: dbmate, k8sgpt, hubble-ui, trivy, osv-scanner, restic, kube-rbac-proxy, terraform-docs, k3s, zot, rqlite, minio, k3d, spegel, opa, vcluster, falcosidekick, terraform-provider-google, ferretdb, opentelemetry-collector, kots, sops, tflint, ksops,...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step, step-issuer...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step, step-issuer...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: rclone, tkn, step-issuer, buf, sftpgo, gogatekeeper, cloudflared, gitness, kyverno-policy-reporter-ui, caddy, step, step-ca, karma...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: argo-workflows, kots, trillian, step-ca, caddy, step...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: spicedb, temporal-server, ferretdb, argo-workflows, kots, trillian, amass, kube-bench, k3s, kine, src, caddy, step, step-ca...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: harbor-registry, hugo-extended, k8sgpt, chezmoi, trivy, restic, flyte, kubescape, zot, timestamp-authority, rekor, hugo, py3-cassandra-medusa, cosign, rclone, argo-workflows, opentelemetry-collector, sqlpad, sops, bank-vaults, falcoctl, ksops, cortex, pulumi, thanos,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: kubernetes-event-exporter, gitsign, scorecard, kubescape, crossplane-provider-azure-sql, k3s, snyk-cli, crossplane-provider-azure, flux-helm-controller, flux-notification-controller, rekor, k3d, timestamp-authority, kubevela, zot, flux-image-automation-controller,...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache-fips, policy-controller-fips, secrets-store-csi-driver-provider-azure, crossplane-provider-aws-redshift-fips, crossplane-provider-aws-mq, custom-pod-autoscaler-fips, crossplane-provider-aws-emr, crossplane-provider-aws-sns,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: cloudnative-pg, sqlexporter-fips, ory-kratos, splunk-otel-collector-fips, openbao-fips, chainloop-control-plane-fips, kots, falcosidekick, kine, opentelemetry-collector-contrib, cloudnative-pg-fips, authentik-fips, kube-bench, gitaly-fips, grafana-alloy, openfga-fips...