CVE-2026-30836 vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, caddy, step-issuer-fips, frankenphp-8.2, frankenphp-8.4, step-ca-fips, frankenphp-8.5, caddy-fips...

GHSA-Q4R8-XM5F-56GW vulnerabilities

Vulnerabilities for packages: frankenphp-8.3, caddy, step-issuer-fips, frankenphp-8.2, frankenphp-8.4, step-ca-fips, frankenphp-8.5, caddy-fips...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: bento, mattermost-fips, telegraf, contour, crossplane-provider-aws-backup, apache-beam-python-3.11-sdk, kube-rbac-proxy-fips, caddy, crossplane-provider-aws-kms, crossplane-provider-aws-efs-fips, mattermost, crossplane-provider-aws-s3, emissary, fleet-server,...

CVE-2026-25518 vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, step-issuer, cert-manager-google-cas-issuer-fips, step-issuer-fips, cert-manager-openshift-routes-fips, cert-manager-google-cas-issuer, percona-xtradb-cluster-operator, percona-server-mongodb-operator-fips, cert-manager-cmctl,...

CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input

Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...

GHSA-GHW8-3XQW-HHCJ vulnerabilities

Vulnerabilities for packages: cert-manager-istio-csr, cert-manager-webhook-pdns, step-issuer, aws-privateca-issuer, cert-manager-webhook-pdns-fips, step-issuer-fips, aws-privateca-issuer-fips, cert-manager-cmctl, cert-manager-cmctl-fips, cert-exporter-fips, cert-exporter, cert-manager,...

GHSA-X6FH-7QMF-69XH vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer, caddy, step-issuer-fips, step-ca-fips, step-fips, step, caddy-fips...

CVE-2025-62820 vulnerabilities

Vulnerabilities for packages: step-ca, step-issuer, caddy, step-issuer-fips, step-ca-fips, step-fips, step, caddy-fips...