CVE-2025-71405 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, gogatekeeper, sftpgo, tkn, dapr-fips, dapr, caddy-fips, tkn-fips, telegraf, kyverno-policy-reporter-ui, step-issuer, caddy, step-ca-fips, cloudflared, step, rclone, buf, gitness, kyverno-policy-reporter-ui-fips, rclone-fips, karma, step-ca, step-fip...

GO-2026-4775 vulnerabilities

Vulnerabilities for packages: step-ca-fips, step-issuer-fips, frankenphp-8.2, caddy-fips, frankenphp-8.3, frankenphp-8.5, frankenphp-8.4, caddy...

CLEANSTART-2026-HR84779 Security fixes in step-ca-fips 0.30.2-r1

Package step-ca-fips version 0.30.2-r1 fixes 16 vulnerabilities: CVE-2026-39828, CVE-2026-39829, CVE-2026-39830, CVE-2026-39831, CVE-2026-39832...

CLEANSTART-2026-HH86881 Security fixes in step-ca-fips 0.29.0-r1

Package step-ca-fips version 0.29.0-r1 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-NI95810 Security fixes in step-ca-fips 0.29.0-r0

Package step-ca-fips version 0.29.0-r0 fixes 2 vulnerabilities: CVE-2025-68121, ghsa-mqqf-5wvp-8fh8...

GHSA-FF52-PH69-CF7X vulnerabilities

Vulnerabilities for packages: spicedb-operator, crossplane-provider-aws-organizations, cloud-provider-azure, crossplane-provider-aws-globalaccelerator-fips, external-secrets-operator, openfga-fips, nri-mongodb, art, clickhouse-backup, mongodb-kubernetes-operator-fips, custom-pod-autoscaler, apko,...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, vault-fips, cloudprober-fips, seaweedfs-rocksdb, authentik, commercial-expanso-edge, sftpgo-plugin-eventsearch, kubeflow-pipelines, opentelemetry-collector-contrib-fips, sqlexporter, step-issuer, steampipe, openfga-fips, caddy,...

CLEANSTART-2026-GM09342 Security fixes for CVE-2025-68121, CVE-2026-26958, ghsa-fw7p-63qq-7hpr, ghsa-mqqf-5wvp-8fh8 applied in versions: 0.29.0-r0, 0.29.0-r1

Multiple security vulnerabilities affect the step-ca-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-J5PM-7495-QMR3 vulnerabilities

Vulnerabilities for packages: kubo-fips, request-1279-14, helm-mapkubeapis, nemo, aws-signer-notation-plugin, cloud-provider-azure, rancher-security-scan, sbom-convert, gotenberg, petname, openfga-fips, dex, opentelemetry-collector-contrib, splunk-otel-collector-fips, azurefile-csi-fips,...