All products

github.com/smallstep/certificates

Go · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)CVE-2026-30836 · GHSA-Q4R8-XM5F-56GWVersion ranges need review. github.com/smallstep/certificates Go Critical Fix reported
step-ca Has Improper Authorization Check for SSH Certificate RevocationCVE-2025-66406 · GHSA-J7C9-79X7-8HPRVersion ranges need review. github.com/smallstep/certificates Go Medium Fix reported
Step CA Has Authorization Bypass in ACME and SCEP ProvisionersCVE-2025-44005 · GHSA-H8CP-697H-8C8PVersion ranges need review. github.com/smallstep/certificates Go Critical Fix reported
Step CA affected by an index out of bounds panic in TPM attestation EKU validationCVE-2026-40097 · GHSA-9QQ8-CGCV-QMC9Version ranges need review. github.com/smallstep/certificates Go Low Fix reported