13 matches found
CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: frankenphp-8.4, caddy-fips, frankenphp-8.2, caddy, frankenphp-8.3, frankenphp-8.5, step-issuer-fips, step-ca-fips...
CLEANSTART-2026-DE61610 Security fixes in step-issuer-fips 0.9.9-r2
Package step-issuer-fips version 0.9.9-r2 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
GHSA-Q4R8-XM5F-56GW vulnerabilities
Vulnerabilities for packages: frankenphp-8.4, caddy-fips, frankenphp-8.2, caddy, frankenphp-8.3, frankenphp-8.5, step-issuer-fips, step-ca-fips...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: frankenphp-8.4, caddy-fips, frankenphp-8.2, caddy, frankenphp-8.3, frankenphp-8.5, step-issuer-fips, step-ca-fips...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: flux-source-watcher-fips, syncthing-fips, buildkite-agent, crossplane-provider-aws-ssm-fips, caddy-fips, crossplane-provider-aws-cognitoidentity-fips, crossplane-provider-aws-elasticache, goose-fips, grafana-mimir, trivy-operator-fips, tekton-pipelines-fips,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: gitlab-operator, percona-server-mongodb-operator-fips, cert-manager-csi-driver-fips, cert-manager-openshift-routes, mariadb-operator-fips, cert-manager-webhook-pdns-fips, mariadb-operator, cert-manager-webhook-pdns, cert-manager-google-cas-issuer, gitlab-operator-fip...
CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...
GHSA-GHW8-3XQW-HHCJ vulnerabilities
Vulnerabilities for packages: cert-manager-cmctl, aws-privateca-issuer, cert-manager-cmctl-fips, step-issuer, cert-exporter, cert-exporter-fips, cert-manager-webhook-pdns-fips, cert-manager-webhook-pdns, aws-privateca-issuer-fips, step-issuer-fips, cert-manager-istio-csr...