CLEANSTART-2026-MK81849

Import Source

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-MK81849

Upstream

Published

2026-09-18T10:30:17Z

Modified

2026-09-18T11:47:16Z

Summary

Security fix for CVE-2025-66406 applied in: step 0.28.7-r2, step-cli 0.27.5-r1, step-issuer-fips 0.9.11-r1

Details

CVE-2025-66406 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details.

References

Affected packages

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.28.7-r2

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MK81849.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.27.5-r1

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MK81849.json"

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

0.9.11-r1

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-MK81849.json"