CLEANSTART-2026-DE61610 Security fixes in step-issuer-fips 0.9.9-r2

Package step-issuer-fips version 0.9.9-r2 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...

CLEANSTART-2026-DP50592 Security fixes in step-issuer 0.10.2-r2

Package step-issuer version 0.10.2-r2 fixes 3 vulnerabilities: CVE-2026-42507, CVE-2026-42504, CVE-2026-27145...

CLEANSTART-2026-ID94434 Security fixes in step-issuer 0.10.2-r3

Package step-issuer version 0.10.2-r3 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-KO29814 Security fixes in step-issuer 0.9.10-r0

Package step-issuer version 0.9.10-r0 fixes 1 vulnerabilities: CVE-2025-61729...

CLEANSTART-2026-UR44491 Security fixes in step-issuer 0.10.1-r0

Package step-issuer version 0.10.1-r0 fixes 4 vulnerabilities: CVE-2026-30836, CVE-2026-33186, ghsa-q4r8-xm5f-56gw, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-XV94605 Security fixes in step-issuer 0.12.0-r0

Package step-issuer version 0.12.0-r0 fixes 4 vulnerabilities: CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-LA03825 Security fixes in step-issuer 0.9.11-r1

Package step-issuer version 0.9.11-r1 fixes 60 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-69725...

CLEANSTART-2026-DK89443 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-25793, CVE-2026-30836 applied in versions: 0.10.2-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-WX54555 Security fixes for CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-25793, CVE-2026-30836 applied in versions: 0.10.2-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: gomplate, istio, rancher, sops, kots, witness, kubernetes-dashboard, rancher-machine, podman, step-kms-plugin, flux-kustomize-controller, spire-server, cilium-cli, containerd, cluster-api-azure-controller, telegraf, gitlab-runner, cert-manager, prometheus, ko, chezmo...

CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: istio, crossplane-provider-azure-authorization, helm, kots, mattermost, gptscript, ingress-nginx-controller, prometheus-operator, step, kubernetes-dashboard, kyverno, fq, gitea, kubernetes, crossplane-provider-aws-elasticache, traefik, hydra, opentelemetry-collector,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: dapr, migrate, commercial-expanso-edge, kots, vault-fips, openfga-fips, sqlexporter-fips, spicedb, steampipe, splunk-otel-collector-fips, seaweedfs-fips, ferretdb, keda-fips, cloudprober-fips, opentelemetry-collector-contrib, sftpgo-plugin-eventsearch, seaweedfs,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tetragon, istio, rancher, spiffe-helper, cis-operator, wave, certificate-transparency, aws-flb-kinesis, dbmate, kots, dgraph, terraform-provider-pagerduty, kyverno-policy-reporter-kyverno-plugin, argo-workflows, tofu-controller, witness, kubernetes-dashboard,...