CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, step, dapr-fips, dapr, gitness, buf, step-issuer-fips, caddy, tkn, cloudflared, karma, step-fips, rclone-fips, step-ca-fips, step-ca, step-issuer, gogatekeeper, sftpgo, tkn-fips, caddy-fips, kyverno-policy-reporter-ui, rclone, telegra...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: step-issuer, kyverno-policy-reporter-ui, rclone, gogatekeeper, sftpgo, tkn, gitness, caddy, step, karma, step-ca, cloudflared, buf...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: step-issuer, kyverno-policy-reporter-ui, rclone, gogatekeeper, sftpgo, tkn, gitness, caddy, step, karma, step-ca, cloudflared, buf...

CLEANSTART-2026-SZ57384 Security fix for GHSA-3fxj-6jh8-hvhx applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UC45945 Security fix for GHSA-rjr7-jggh-pgcp applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-VU46471 Security fix for GHSA-9g5q-2w5x-hmxf applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZK17836 Slack Nebula before 1

Security vulnerability affects the step-ca package. Slack Nebula before 1...

CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

CLEANSTART-2026-FB73701 Nebula is a scalable overlay networking tool

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

PT-2026-108486

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

PT-2026-108398

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

CLEANSTART-2026-HY04469 Security fix for GHSA-vrw8-fxc6-2r93 applied in: gitness 3.0.1-r0, gitness 3.1.1-r0, gitness 3.2.0-r0, step-ca 0.27.5-r0, step-cli 0.27.5-r1

GHSA-vrw8-fxc6-2r93 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: caddy, step, step-ca, caddy-fips, step-issuer, step-fips, step-ca-fips, step-issuer-fips...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: caddy, step, step-ca, caddy-fips, step-issuer, step-fips, step-ca-fips, step-issuer-fips...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: caddy, caddy-fips, frankenphp-8.5, frankenphp-8.3, frankenphp-8.2, step-ca-fips, frankenphp-8.4, step-issuer-fips...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, step, dapr-fips, dapr, gitness, buf, step-issuer-fips, caddy, tkn, cloudflared, karma, step-fips, rclone-fips, step-ca-fips, step-ca, step-issuer, gogatekeeper, sftpgo, tkn-fips, caddy-fips, kyverno-policy-reporter-ui, rclone, telegra...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: caddy, argo-workflows-fips, step, step-ca, trillian, trillian-fips, caddy-fips, kots, argo-workflows, wavefront-collector-for-kubernetes...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: opa, step, flyte, portieris, google-osconfig-agent, pulumi-language-dotnet, opa-fips-envoy, pulumi, kubeflow-pipelines, flux-image-reflector-controller-fips, step-issuer-fips, caddy, terraform-provider-google, opa-fips, dgraph, cert-exporter-fips, step-fips, kyverno,...