13 matches found
CLEANSTART-2026-MK81849 Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZR04706 Security fix for CVE-2025-44005 applied in: step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1
CVE-2025-44005 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
GO-2026-4775 vulnerabilities
Vulnerabilities for packages: frankenphp-8.5, step-ca-fips, frankenphp-8.2, step-issuer-fips, frankenphp-8.4, caddy, caddy-fips, frankenphp-8.3...
CLEANSTART-2026-DE61610 Security fixes in step-issuer-fips 0.9.9-r2
Package step-issuer-fips version 0.9.9-r2 fixes 2 vulnerabilities: CVE-2025-61727, CVE-2025-61729...
CLEANSTART-2026-YB56144 Security fixes in step-issuer-fips 0.9.9-r3
Package step-issuer-fips version 0.9.9-r3 fixes 2 vulnerabilities: ghsa-h8cp-697h-8c8p, ghsa-j7c9-79x7-8hpr...
GHSA-Q4R8-XM5F-56GW vulnerabilities
Vulnerabilities for packages: frankenphp-8.5, step-ca-fips, frankenphp-8.2, step-issuer-fips, frankenphp-8.4, caddy, caddy-fips, frankenphp-8.3...
CVE-2026-30836 vulnerabilities
Vulnerabilities for packages: frankenphp-8.5, step-ca-fips, frankenphp-8.2, step-issuer-fips, frankenphp-8.4, caddy, caddy-fips, frankenphp-8.3...
CVE-2026-27141 vulnerabilities
Vulnerabilities for packages: rke2-runtime-fips, gitlab-pages-fips, buildkite-agent, crossplane-provider-aws-rolesanywhere-fips, fleet-server-fips, flux-kustomize-controller, seaweedfs-operator-fips, gotenberg, splunk-otel-collector, cg, opentelemetry-collector-contrib,...
CVE-2026-25518 vulnerabilities
Vulnerabilities for packages: gitlab-operator-fips, mariadb-operator, step-issuer, opentelemetry-operator, cert-manager-istio-csr-fips, opentelemetry-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-istio-csr, mariadb-operator-fips, cert-manager-google-cas-issuer-fips,...
CLEANSTART-2026-KV78041 processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input
Multiple security vulnerabilities affect the step-issuer-fips package. The processing time for parsing some invalid inputs scales non-linearly with respect to the size of the input. See references for individual vulnerability details...
GHSA-GHW8-3XQW-HHCJ vulnerabilities
Vulnerabilities for packages: aws-privateca-issuer, cert-exporter-fips, cert-manager-istio-csr, cert-manager-cmctl-fips, step-issuer, aws-privateca-issuer-fips, cert-exporter, step-issuer-fips, cert-manager-cmctl, cert-manager-webhook-pdns-fips, cert-manager-webhook-pdns...