GHSA-Q4R8-XM5F-56GW vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, frankenphp-8.2, frankenphp-8.4, step-ca-fips, step-issuer-fips, frankenphp-8.3, caddy, caddy-fips...

CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: frankenphp-8.5, frankenphp-8.2, frankenphp-8.4, step-ca-fips, step-issuer-fips, frankenphp-8.3, caddy, caddy-fips...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-ecs-fips, apache-beam-python-3.13-sdk, crossplane-provider-aws-ecr, cloudbeat, kyverno-policy-reporter, crossplane-provider-aws-cognitoidp, contour, apm-server-fips, crossplane-provider-aws-efs-fips, crossplane-provider-aws-memorydb,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: opentelemetry-operator, opentelemetry-operator-fips, aws-privateca-issuer, percona-xtradb-cluster-operator-fips, step-issuer, cert-manager-cmctl, cert-manager-webhook-pdns, cert-manager-openshift-routes-fips, percona-xtradb-cluster-operator, mariadb-operator-fips,...

CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-webhook-pdns, cert-manager-webhook-pdns-fips, cert-exporter, aws-privateca-issuer, cert-manager-fips, cert-manager, cert-manager-istio-csr, step-issuer, aws-privateca-issuer-fips, cert-manager-cmctl-fips, cert-manager-cmctl, step-issuer-fips,...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: step, step-ca-fips, step-ca, step-issuer, step-fips, step-issuer-fips, caddy, caddy-fips...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: step, step-ca-fips, step-ca, step-issuer, step-fips, step-issuer-fips, caddy, caddy-fips...