CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: rclone, cloudflared, step-ca, caddy-fips, step, step-issuer-fips, buf, gogatekeeper, step-issuer, dapr, kyverno-policy-reporter-ui-fips, step-ca-fips, telegraf, tkn-fips, caddy, step-fips, dapr-fips, karma, tkn, rclone-fips, gitness, sftpgo, kyverno-policy-reporter-u...

GHSA-XCVF-46F4-XWXF vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, caddy, buf, karma, cloudflared, step, tkn, sftpgo, gogatekeeper, step-issuer, gitness, step-ca, rclone...

CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, caddy, buf, karma, cloudflared, step, tkn, sftpgo, gogatekeeper, step-issuer, gitness, step-ca, rclone...

CLEANSTART-2026-VU46471 Security fix for GHSA-9g5q-2w5x-hmxf applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SZ57384 Security fix for GHSA-3fxj-6jh8-hvhx applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UC45945 Security fix for GHSA-rjr7-jggh-pgcp applied in: step-ca 0.28.4-r5

Security vulnerability affects the step-ca package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-ZK17836 Slack Nebula before 1

Security vulnerability affects the step-ca package. Slack Nebula before 1...

CLEANSTART-2026-NL66537 Open Redirect vulnerability in the go-chi/chi >=5

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

CLEANSTART-2026-FB73701 Nebula is a scalable overlay networking tool

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

PT-2026-108486

Security vulnerability affects the step-ca package. An Open Redirect vulnerability in the go-chi/chi =5...

PT-2026-108398

Security vulnerability affects the step-ca package. Nebula is a scalable overlay networking tool...

CLEANSTART-2026-HY04469 Security fix for GHSA-vrw8-fxc6-2r93 applied in: gitness 3.0.1-r0, gitness 3.1.1-r0, gitness 3.2.0-r0, step-ca 0.27.5-r0, step-cli 0.27.5-r1

GHSA-vrw8-fxc6-2r93 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-DK08962 Security fix for CVE-2024-45339 applied in: cloudprober 0.11.9-r0, cloudprober-fips 0.12.9-r0, cluster-proportional-autoscaler 1.8.11-r0, ip-masq-agent 2.10.2-r0, ip-masq-agent 2.11.0-r0, ip-masq-agent 2.9.3-r0, step-ca 0.27.5-r0

CVE-2024-45339 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: rclone, cloudflared, step-ca, caddy-fips, step, step-issuer-fips, buf, gogatekeeper, step-issuer, dapr, kyverno-policy-reporter-ui-fips, step-ca-fips, telegraf, tkn-fips, caddy, step-fips, dapr-fips, karma, tkn, rclone-fips, gitness, sftpgo, kyverno-policy-reporter-u...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-ca-fips, step-ca, step-issuer-fips, caddy, step-fips, caddy-fips, step, step-issuer...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-ca-fips, step-ca, step-issuer-fips, caddy, step-fips, caddy-fips, step, step-issuer...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-ca-fips, step-issuer-fips, frankenphp-8.4, frankenphp-8.2, caddy, frankenphp-8.3, caddy-fips, frankenphp-8.5...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: trillian-fips, step-ca, argo-workflows-fips, argo-workflows, caddy, kots, trillian, caddy-fips, step, wavefront-collector-for-kubernetes...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: sigstore-scaffolding-fips, flux-image-reflector-controller-fips, pulumi-kubernetes-operator, spark-operator-fips, step-ca, kyverno, cluster-proportional-autoscaler-fips, dgraph, smarter-device-manager-fips, nfs-subdir-external-provisioner-fips, opa-fips-envoy,...