GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: age, snyk-cli, kine, step-issuer, helm, falcoctl, crossplane-provider-azure-authorization, wal-g, gptscript, splunk-otel-collector, kubernetes, kubernetes-dashboard, cert-manager, kyverno, vault-benchmark, mattermost, caddy, flux-operator, go-discover, k8sgpt, melang...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: nerdctl, glab, snyk-cli, kine, minio, step-issuer, helm, argo-cd, crossplane-provider-azure-authorization, prometheus-operator, crossplane-provider-aws-elasticache, cilium, gptscript, telegraf, vale, kubernetes, kubernetes-dashboard, kyverno, vitess,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: temporal-fips, opentelemetry-collector-contrib-fips, envoy-gateway-fips, seaweedfs, sqlexporter, spire-server-fips, step-issuer, spicedb-fips, gitness, gotrue, gitlab-kas-fips, seaweedfs-rocksdb-fips, vault, ldap2pg, spire-server, step-ca-fips, kots, cerbos, telegraf...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: dask-gateway, snyk-cli, kine, spqr, step-issuer, helm, falcoctl, harbor, crossplane-provider-azure-authorization, kyverno-policy-reporter-ui, wal-g, cert-manager-cmctl, libnvidia-container, datadog-agent, splunk-otel-collector, terraform-provider-azapi, kubernetes,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: dask-gateway, snyk-cli, kine, spqr, step-issuer, helm, falcoctl, harbor, crossplane-provider-azure-authorization, kyverno-policy-reporter-ui, wal-g, cert-manager-cmctl, libnvidia-container, datadog-agent, splunk-otel-collector, terraform-provider-azapi, kubernetes,...

CLEANSTART-2026-CV29689 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-25793, CVE-2026-30836 applied in versions: 0.10.2-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CE02533 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.1-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UZ79996 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.0-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-Q4R8-XM5F-56GW vulnerabilities

Vulnerabilities for packages: caddy, step-issuer-fips, frankenphp-8.2, frankenphp-8.3, frankenphp-8.5, frankenphp-8.4, caddy-fips, step-ca-fips...

CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: caddy, step-issuer-fips, frankenphp-8.2, frankenphp-8.3, frankenphp-8.5, frankenphp-8.4, caddy-fips, step-ca-fips...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, opentelemetry-collector-contrib-fips, livekit-cli, crossplane-provider-aws-dynamodb-fips, datadog-agent-fips, crossplane-provider-aws-eks, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, deck-fips, trivy-operator-fips,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: aws-ebs-csi-driver, opentelemetry-collector-contrib-fips, livekit-cli, crossplane-provider-aws-dynamodb-fips, datadog-agent-fips, crossplane-provider-aws-eks, crossplane-provider-aws-rds, crossplane-provider-aws-sqs, deck-fips, trivy-operator-fips,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: age, amass, ksops, kine, minio, step-issuer, fulcio, kyverno-policy-reporter, juicefs, spire-server, chezmoi, db-operator, wolfictl, nuclei, splunk-otel-collector, telegraf, sftpgo, sqlexporter, kyverno, step-kms-plugin, k3s, nri-mysql, tkn, mattermost, aactl,...