Vulnerability Database - OSV

GHSA-h8cp-697h-8c8p

Go/github.com/smallstep/certificates

Step CA Has Authorization Bypass in ACME and SCEP Provisioners 03 Dec 2025

Fix available
Severity - 10.0 (Critical)

CLEANSTART-2026-ZH50133

CleanStart/step-cli
CleanStart/step-issuer-fips

Security fix for ghsa-h8cp-697h-8c8p applied in: step-cli 0.27.5-r0, step-issuer-fips 0.9.9-r3 5 days ago

Fix available

CVE-2025-44005

github.com/smallstep/certificates

See record for full details 17 Dec 2025

No fix available
Severity - 10.0 (Critical)

GO-2025-4180

Go/github.com/smallstep/certificates

Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates 08 Dec 2025

Fix available

MINI-3262-qw8f-6w4w

MinimOS/caddy
MinimOS/caddy-man
MinimOS/caddy-src

See record for full details 05 Dec 2025

Fix available

CGA-g8pw-g798-8xxx

Chainguard/caddy-fips

See record for full details 05 Dec 2025

Fix available
Severity - 10.0 (Critical)

CGA-fwg3-gfp3-rphr

Chainguard/caddy-src
Wolfi/caddy-src

See record for full details 04 Dec 2025

Fix available
Severity - 10.0 (Critical)

CGA-x476-7grc-3jmj

Chainguard/caddy-man
Wolfi/caddy-man

See record for full details 04 Dec 2025

Fix available
Severity - 10.0 (Critical)

CGA-xqcv-56f4-92qj

Chainguard/caddy
Wolfi/caddy

See record for full details 04 Dec 2025

Fix available
Severity - 10.0 (Critical)

CGA-q6ph-rpqx-9jqq

Chainguard/caddy-src
Wolfi/caddy-src

See record for full details 04 Dec 2025

Fix available
Severity - 10.0 (Critical)

CGA-2chm-9x44-vx32

Chainguard/caddy-man
Wolfi/caddy-man

See record for full details 04 Dec 2025

Fix available
Severity - 10.0 (Critical)

CGA-rvwx-7cff-xw4q

Chainguard/caddy
Wolfi/caddy

See record for full details 04 Dec 2025

Fix available
Severity - 10.0 (Critical)