CVE-2026-25680 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

CVE-2026-25681 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

GHSA-WRH2-89VG-4J9G vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

GHSA-W9P8-PVXH-RXPJ vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

GHSA-M9X8-M34X-FJ9Q vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

CVE-2026-27136 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

CVE-2026-42506 vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

GHSA-CG87-VWWH-XVGJ vulnerabilities

Vulnerabilities for packages: terraform-provider-acme, gitea, gptscript, telegraf, kine, prometheus-operator, prometheus, cilium, caddy, hubble, step-issuer, kyverno, argo-cd, ingress-nginx-controller, helm, minio, opentelemetry-collector, vale, glab, crossplane-provider-azure-storage, k3s, hydra...

CVE-2026-41889 vulnerabilities

Vulnerabilities for packages: caddy, commercial-chainloop-backend, sftpgo-plugin-eventsearch, step-issuer, kube-bench, ory-kratos, dapr, ferretdb, grafana, azure-service-operator-fips, goose, kube-bench-fips, envoy-gateway-fips, opentelemetry-collector-contrib, seaweedfs-rocksdb, openfga,...

CVE-2026-32289 vulnerabilities

Vulnerabilities for packages: tofu-controller, secrets-store-csi-driver-provider-aws, volume-modifier-for-k8s, dgraph, kube-arangodb, telegraf, spicedb-operator, eksctl, mc, rabbitmq-messaging-topology-operator, dbmate, boring-registry, kserve-modelmesh-serving, kserve-rest-proxy, rancher-agent,...

GHSA-7MR4-XJXG-34G6 vulnerabilities

Vulnerabilities for packages: tofu-controller, secrets-store-csi-driver-provider-aws, volume-modifier-for-k8s, dgraph, kube-arangodb, telegraf, spicedb-operator, eksctl, mc, rabbitmq-messaging-topology-operator, dbmate, boring-registry, kserve-modelmesh-serving, kserve-rest-proxy, rancher-agent,...

CLEANSTART-2026-CV29689 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-25793, CVE-2026-30836 applied in versions: 0.10.2-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-CE02533 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.1-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UZ79996 Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-30836, CVE-2026-33186, ghsa-p77j-4mvh-x3m3, ghsa-q4r8-xm5f-56gw applied in versions: 0.10.0-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1

Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-Q4R8-XM5F-56GW vulnerabilities

Vulnerabilities for packages: step-issuer-fips, caddy, frankenphp-8.5, step-ca-fips, frankenphp-8.4, caddy-fips, frankenphp-8.2, frankenphp-8.3...

CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: step-issuer-fips, caddy, frankenphp-8.5, step-ca-fips, frankenphp-8.4, caddy-fips, frankenphp-8.2, frankenphp-8.3...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: tempo-fips, crossplane-provider-aws-wafv2, trivy, polaris-fips, datadog-agent, contour, caddy, livekit-cli, gitlab-runner, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-route53-fips, opa, crossplane-provider-aws-elasticache, opa-fips-envoy,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: tempo-fips, crossplane-provider-aws-wafv2, trivy, polaris-fips, datadog-agent, contour, caddy, livekit-cli, gitlab-runner, crossplane-provider-aws-cloudwatchlogs-fips, crossplane-provider-aws-route53-fips, opa, crossplane-provider-aws-elasticache, opa-fips-envoy,...

GHSA-FW7P-63QQ-7HPR vulnerabilities

Vulnerabilities for packages: juicefs, gitea, dgraph, timestamp-authority, telegraf, kine, openbao, kubeflow-pipelines, crossplane-provider-sql, caddy, wolfictl, loki, dbmate, kyverno, step-issuer, openfga, age, envoy-gateway, grafana-alloy, minio, jitsucom-bulker, rekor, hydra,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-csi-driver, percona-server-mongodb-operator, cert-manager-cmctl, mariadb-operator-fips, cert-manager-openshift-routes, step-issuer, cert-manager-google-cas-issuer, aws-privateca-issuer, mariadb-operator, percona-server-mongodb-operator-fips,...