CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step, step-issuer-fips, step-fips, caddy-fips, step-issuer, caddy, step-ca, step-ca-fips...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: gitness, step-fips, caddy-fips, rclone-fips, buf, caddy, kyverno-policy-reporter-ui, karma, telegraf, sftpgo, step-issuer-fips, dapr, gogatekeeper, step-issuer, cloudflared, rclone, step-ca-fips, step, tkn, tkn-fips, dapr-fips, step-ca, kyverno-policy-reporter-ui-fip...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step, step-issuer-fips, step-fips, caddy-fips, step-issuer, caddy, step-ca, step-ca-fips...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, frankenphp-8.3, frankenphp-8.5, caddy-fips, frankenphp-8.4, caddy, frankenphp-8.2, step-ca-fips...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step, caddy-fips, argo-workflows, argo-workflows-fips, kots, caddy, step-ca, trillian, trillian-fips, wavefront-collector-for-kubernetes...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: opa, opa-fips-envoy, step-fips, nfs-subdir-external-provisioner, caddy-fips, skaffold, smarter-device-manager, spark-operator, flux-image-reflector-controller, kyverno, portieris, pulumi, kubeflow-fips, smarter-device-manager-fips, opa-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: gomplate, grafana-agent-operator, spegel, certificate-transparency, opa, k8sgpt-operator, grafana-mimir, spire-server, spicedb, dagger, k3d, cert-manager-cmctl, cloudnative-pg, tflint, melange, kube-rbac-proxy, falcosidekick, restic, ksops, kwok,...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step, step-issuer...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca, caddy, step, step-issuer...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: sftpgo, kyverno-policy-reporter-ui, karma, tkn, cloudflared, buf, rclone, step-ca, step, gitness, caddy, gogatekeeper, step-issuer...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step-ca, kots, trillian, step, argo-workflows, caddy...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: amass, ferretdb, temporal-server, spicedb, kine, kube-bench, kots, src, step, step-ca, argo-workflows, trillian, k3s, caddy...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: grafana-agent-operator, tkn, thanos, druid, spire-server, grafana-mimir, chezmoi, trino, flux-kustomize-controller, flux-image-reflector-controller, restic, airflow, flux, cosign, hugo, py3-cassandra-medusa, ksops, flyte, wal-g, prometheus-operator, terragrunt,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: gomplate, tkn, crossplane-provider-azure, crossplane-provider-azure-sql, spire-server, grafana-mimir, vexctl, k3d, flux-kustomize-controller, neuvector-sigstore-interface, gh, flux-image-reflector-controller, pulumi-kubernetes-operator, slsa-verifier, flux, cosign,...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: sqlexporter, drone-fips, sftpgo-plugin-geoipfilter, terraform-provider-random-fips, argo-cd, helm-exporter, whereabouts, crossplane-provider-aws-kinesisanalytics-fips, kubeflow-fips, cluster-api-azure-controller-fips, yunikorn-k8shim-fips,...