CLEANSTART-2026-JI14170

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-JI14170

Upstream

Published

2026-09-18T10:25:22Z

Modified

2026-09-18T11:45:50Z

Summary

Security fix for ghsa-q4r8-xm5f-56gw applied in: step-cli 0.27.5-r0, step-issuer 0.10.0-r0, step-issuer 0.10.1-r0

Details

ghsa-q4r8-xm5f-56gw affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.27.5-r0

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JI14170.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.10.0-r0

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JI14170.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.10.1-r0

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-JI14170.json"