CLEANSTART-2026-SL17084 Security fixes in step-ca 0.27.5-r0

Package step-ca version 0.27.5-r0 fixes 14 vulnerabilities: CVE-2026-33186, CVE-2025-27144, CVE-2026-34986, CVE-2025-22868, CVE-2026-25793...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, step, caddy, step-issuer, step-ca, step-fips, step-ca-fips, caddy-fips...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: dapr-fips, caddy, telegraf, gogatekeeper, kyverno-policy-reporter-ui-fips, gitness, cloudflared, rclone, dapr, kyverno-policy-reporter-ui, step-issuer-fips, step, tkn, buf, tkn-fips, sftpgo, step-ca-fips, karma, caddy-fips, step-issuer, step-ca, rclone-fips, step-fip...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, step, caddy, step-issuer, step-ca, step-fips, step-ca-fips, caddy-fips...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, frankenphp-8.3, caddy, frankenphp-8.2, frankenphp-8.5, frankenphp-8.4, step-ca-fips, caddy-fips...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: argo-workflows, argo-workflows-fips, trillian-fips, step, caddy, wavefront-collector-for-kubernetes, step-ca, trillian, kots, caddy-fips...

GO-2025-3372 vulnerabilities

Vulnerabilities for packages: pulumi-language-dotnet, opa-fips-envoy, spark-operator, sriov-network-device-plugin-fips, caddy, sigstore-scaffolding, nfs-subdir-external-provisioner, kyverno-notation-aws, smarter-device-manager, amass, skaffold, kubeflow, cluster-proportional-autoscaler-fips,...

GO-2024-2978 vulnerabilities

Vulnerabilities for packages: sops, cert-manager-cmctl, grafana-mimir, restic, dbmate, kubernetes-csi-driver-hostpath, step-ca, tempo, conftest, grafana-agent-operator, minio, falcosidekick, spegel, k3d, kube-rbac-proxy, cloudnative-pg, terragrunt, opentelemetry-collector, opa,...

GO-2025-4068 vulnerabilities

Vulnerabilities for packages: step, caddy, step-ca, step-issuer...

GO-2026-4458 vulnerabilities

Vulnerabilities for packages: step, caddy, step-ca, step-issuer...

GO-2025-3770 vulnerabilities

Vulnerabilities for packages: step, sftpgo, gogatekeeper, step-issuer, cloudflared, rclone, kyverno-policy-reporter-ui, step-ca, karma, tkn, buf, caddy, gitness...

GO-2024-2605 vulnerabilities

Vulnerabilities for packages: step, kots, step-ca, caddy, trillian, argo-workflows...

GO-2024-2606 vulnerabilities

Vulnerabilities for packages: step, kots, kine, spicedb, src, temporal-server, amass, step-ca, trillian, caddy, k3s, argo-workflows, ferretdb, kube-bench...

GO-2024-2918 vulnerabilities

Vulnerabilities for packages: sops, grafana-mimir, restic, cortex, fluent-bit-plugin-loki, hugo, step-ca, druid, tempo, grafana-agent-operator, timestamp-authority, buildkitd, prometheus-operator, terragrunt, opentelemetry-collector, airflow, flux, zot, flyte, trino,...

GO-2024-2947 vulnerabilities

Vulnerabilities for packages: sops, vexctl, grafana-mimir, src-fingerprint, glab, step-ca, terraform, actions-runner-controller, gh, timestamp-authority, buildkitd, k3d, terragrunt, kubernetes-event-exporter, flux-helm-controller, opentelemetry-collector, neuvector-sigstore-interface, flux,...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-cognitoidentity, knative-serving, dex-fips, crossplane-provider-family-aws-fips, crossplane-provider-aws-cloudtrail, crossplane-provider-keycloak, cloud-provider-vsphere, crossplane-provider-aws-inspector2-fips, custom-pod-autoscaler-operator,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: argo-workflows-fips, gitlab-cng-fips, sftpgo-plugin-eventstore, steampipe, temporal, openfga-fips, kots, pgtimetable-fips, envoy-gateway, keda-fips, teleport, rke2-runtime, gitlab-cng, commercial-chainloop-backend, kube-bench, ferretdb, chainloop-control-plane-fips,...