GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, frankenphp-8.5, frankenphp-8.3, caddy, caddy-fips, step-ca-fips, frankenphp-8.4, frankenphp-8.2...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: skopeo-fips, commercial-expanso-edge, policy-bot-fips, dkron, temporal-fips, verticadb-operator-fips, k8s-metacollector-fips, eks-distro-fips, drone-fips, mountpoint-s3-csi-driver, step-fips, aws-iam-authenticator-fips, terraform-provider-azurerm-fips,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: rke2-cloud-provider, commercial-expanso-edge, seaweedfs-rocksdb-fips, azure-service-operator, step-ca-fips, spire-server-fips, trillian-fips, harbor-fips, temporal-fips, goose, opentelemetry-collector-contrib-fips, openbao-fips, ory-kratos-fips,...

CLEANSTART-2026-GM09342 Security fixes for CVE-2025-68121, CVE-2026-26958, ghsa-fw7p-63qq-7hpr, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.29.0-r0, 0.29.0-r1

Multiple security vulnerabilities affect the step-ca-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: skopeo-fips, git-lfs-fips, prometheus-podman-exporter, step-ca-fips, spire-server-fips, http-echo, temporal-fips, aws-privateca-issuer-fips, beats-fips, verticadb-operator-fips, blob-csi-fips, polaris-fips, dragonfly-operator, eks-distro-fips, step-fips, openfga,...