18 matches found
CVE-2025-71405 vulnerabilities
Vulnerabilities for packages: telegraf, dapr-fips, caddy-fips, step-fips, rclone, step-issuer-fips, tkn-fips, step-ca, gitness, step-ca-fips, kyverno-policy-reporter-ui, sftpgo, rclone-fips, tkn, gogatekeeper, dapr, caddy, step-issuer, kyverno-policy-reporter-ui-fips, step, buf, cloudflared, karm...
CLEANSTART-2025-CI91808 Security fix for GHSA-j7c9-79x7-8hpm applied in: step-issuer-fips 0.9.9-r1
Security vulnerability affects the step-issuer-fips package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-RS62088 Security fix for GHSA-j7c9-79x7-8hpr applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3
GHSA-j7c9-79x7-8hpr affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
PT-2026-99990
Security vulnerability affects the step-issuer-fips package. This issue is resolved in later releases. See references for vulnerability details...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: caddy-fips, frankenphp-8.2, frankenphp-8.5, step-ca-fips, caddy, frankenphp-8.3, step-issuer-fips, frankenphp-8.4...
CLEANSTART-2026-DE61610 Security fixes in step-issuer-fips 0.9.9-r2
Package step-issuer-fips version 0.9.9-r2 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
PT-2026-86091
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: caddy-fips, frankenphp-8.2, frankenphp-8.5, step-ca-fips, caddy, frankenphp-8.3, step-issuer-fips, frankenphp-8.4...
GHSA-Q4R8-XM5F-56GW vulnerabilities
Vulnerabilities for packages: caddy-fips, frankenphp-8.2, frankenphp-8.5, step-ca-fips, caddy, frankenphp-8.3, step-issuer-fips, frankenphp-8.4...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws-cloudfront, crossplane-provider-aws-acm, crossplane-provider-aws-rolesanywhere-fips, linkerd2-fips, sops, goreleaser, grafana-alloy, crossplane-provider-aws-cloudformation, kubo, step-issuer-fips, syncthing-fips, pulumi-language-dotnet,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: percona-server-mongodb-operator-fips, aws-privateca-issuer, percona-xtradb-cluster-operator, cert-manager-csi-driver, aws-privateca-issuer-fips, cert-manager-google-cas-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, step-issuer-fips,...
CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...
GHSA-GHW8-3XQW-HHCJ vulnerabilities
Vulnerabilities for packages: cert-manager-istio-csr, cert-exporter-fips, aws-privateca-issuer, aws-privateca-issuer-fips, step-issuer, cert-manager-cmctl-fips, cert-manager-webhook-pdns-fips, step-issuer-fips, cert-manager-webhook-pdns, cert-manager-cmctl, cert-exporter...