18 matches found
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: caddy, kyverno-policy-reporter-ui-fips, tkn-fips, kyverno-policy-reporter-ui, dapr-fips, cloudflared, gitness, rclone-fips, dapr, rclone, step-issuer, buf, telegraf, step-issuer-fips, step, step-ca, step-ca-fips, sftpgo, step-fips, karma, tkn, gogatekeeper, caddy-fip...
CLEANSTART-2025-CI91808 Security fix for GHSA-j7c9-79x7-8hpm applied in: step-issuer-fips 0.9.9-r1
Security vulnerability affects the step-issuer-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RS62088 Security fix for GHSA-j7c9-79x7-8hpr applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3
GHSA-j7c9-79x7-8hpr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-99990
Security vulnerability affects the step-issuer-fips package. This issue is resolved in later releases. See references for vulnerability details...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: frankenphp-8.5, caddy, frankenphp-8.2, frankenphp-8.4, step-ca-fips, caddy-fips, frankenphp-8.3, step-issuer-fips...
CLEANSTART-2026-DE61610 Security fixes in step-issuer-fips 0.9.9-r2
Package step-issuer-fips version 0.9.9-r2 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
PT-2026-86091
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: frankenphp-8.5, caddy, frankenphp-8.2, frankenphp-8.4, step-ca-fips, caddy-fips, frankenphp-8.3, step-issuer-fips...
GHSA-Q4R8-XM5F-56GW vulnerabilities
Vulnerabilities for packages: frankenphp-8.5, caddy, frankenphp-8.2, frankenphp-8.4, step-ca-fips, caddy-fips, frankenphp-8.3, step-issuer-fips...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: caddy, traefik, cluster-api-azure-controller-fips, teleport-operator-fips, crossplane-provider-aws-wafv2-fips, fleet-server-fips, kubo-fips, cilium-cli, crossplane-provider-aws-elasticache-fips, dex, cloudbeat, aws-ebs-csi-driver,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: mariadb-operator, cert-manager-webhook-pdns-fips, cert-manager-google-cas-issuer, cert-manager-openshift-routes-fips, cert-manager-csi-driver-fips, aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-openshift-routes, step-issuer, opentelemetry-operator-fip...
CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...
GHSA-GHW8-3XQW-HHCJ vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer-fips, aws-privateca-issuer, cert-manager-webhook-pdns, step-issuer, cert-manager-webhook-pdns-fips, cert-exporter-fips, cert-manager-cmctl, cert-exporter, cert-manager-cmctl-fips, step-issuer-fips, cert-manager-istio-csr...