github.com/smallstep/certificates
🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
View on Github
Activity
- Latest release
- 5mo ago
- Total releases
- 58
- Cadence
- ~7 days
- Last 12 months
- 12
Reach
- Stars
- 8.7k
Details
- First release
- Nov 03, 2018
| Version | Released | |
|---|---|---|
v0.30.2
patch
|
v0.30.2
patch
Dependencies (42)
+ 34 more |
|
v0.30.1
patch
|
v0.30.1
patch
Dependencies (42)
+ 34 more |
|
v0.30.0-rc7
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc7
pre
Dependencies (42)
+ 34 more |
|
v0.30.0
minor
|
v0.30.0
minor
Dependencies (42)
+ 34 more |
|
v0.30.0-rc6
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc6
pre
Dependencies (42)
+ 34 more |
|
v0.30.0-rc5
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc5
pre
Dependencies (42)
+ 34 more |
|
v0.30.0-rc4
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc4
pre
Dependencies (42)
+ 34 more |
|
v0.30.0-rc3
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc3
pre
Dependencies (42)
+ 34 more |
|
v0.30.0-rc2
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc2
pre
Dependencies (42)
+ 34 more |
|
v0.30.0-rc1
pre
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.30.0-rc1
pre
Dependencies (42)
+ 34 more |
|
v0.29.0
minor
2 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev |
v0.29.0
minor
Dependencies (42)
+ 34 more |
|
v0.29.0-rc1
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.29.0-rc1
pre
Dependencies (42)
+ 34 more |
|
v0.28.4
patch
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.4
patch
Dependencies (41)
+ 33 more |
|
v0.28.4-rc2
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.4-rc2
pre
Dependencies (41)
+ 33 more |
|
v0.28.4-rc1
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.4-rc1
pre
Dependencies (41)
+ 33 more |
|
v0.28.3-rc2
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.3-rc2
pre
Dependencies (41)
+ 33 more |
|
v0.28.3
patch
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.3
patch
Dependencies (41)
+ 33 more |
|
v0.28.3-rc1
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.3-rc1
pre
Dependencies (41)
+ 33 more |
|
v0.28.2
minor
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.2
minor
Dependencies (41)
+ 33 more |
|
v0.28.1
minor
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.1
minor
Dependencies (40)
+ 32 more |
|
v0.28.1-rc2
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.28.1-rc2
pre
Dependencies (40)
+ 32 more |
|
v0.27.4-rc1
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.27.4-rc1
pre
Dependencies (40)
+ 32 more |
|
v0.25.3-rc.1
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.25.3-rc.1
pre
Dependencies (38)
+ 30 more |
|
v0.24.3-rc.5
pre
4 CVEs
CVE-2026-40097
GO-2026-5297
GHSA-9qq8-cgcv-qmc9
Jun 25, 2026
Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Step CA affected by an index out of bounds panic in TPM attestation EKU validation in github.com/smallstep/certificates Fixed in
0.30.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.24.3-rc.5
pre
Dependencies (37)
+ 29 more |
|
v0.23.0-rc.3
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.23.0-rc.3
pre
Dependencies (32)
+ 24 more |
|
v0.23.0-rc.2
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.23.0-rc.2
pre
Dependencies (32)
+ 24 more |
|
v0.22.2-rc12
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.22.2-rc12
pre
Dependencies (33)
+ 25 more |
|
v0.22.2-rc10
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.22.2-rc10
pre
Dependencies (33)
+ 25 more |
|
v0.22.2-rc3
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.22.2-rc3
pre
Dependencies (33)
+ 25 more |
|
v0.23.0-rc.1
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.23.0-rc.1
pre
Dependencies (33)
+ 25 more |
|
v0.17.6-rc1
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.17.6-rc1
pre
Dependencies (32)
+ 24 more |
|
v0.17.3-rc2
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.17.3-rc2
pre
Dependencies (28)
+ 20 more |
|
v0.17.0
minor
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.17.0
minor
Dependencies (28)
+ 20 more |
|
v0.16.1
patch
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.16.1
patch
Dependencies (28)
+ 20 more |
|
v0.16.0
minor
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.16.0
minor
Dependencies (28)
+ 20 more |
|
v0.15.16-rc6
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.16-rc6
pre
Dependencies (28)
+ 20 more |
|
v0.15.16-rc4
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.16-rc4
pre
Dependencies (27)
+ 19 more |
|
v0.15.13
minor
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.13
minor
Dependencies (25)
+ 17 more |
|
v0.15.12-rc5
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.12-rc5
pre
Dependencies (25)
+ 17 more |
|
v0.15.12-rc1
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.12-rc1
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc17
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc17
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc15
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc15
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc14
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc14
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc12
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc12
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc10
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc10
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc7
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc7
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc4
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc4
pre
Dependencies (25)
+ 17 more |
|
v0.15.9-rc2
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.15.9-rc2
pre
Dependencies (25)
+ 17 more |
|
v0.14.5
patch
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.14.5
patch
Dependencies (20)
+ 12 more |
|
v0.14.5-rc.2.100MB.badgerV2
pre
3 CVEs
CVE-2026-30836
GO-2026-4775
GHSA-q4r8-xm5f-56gw
Mar 23, 2026
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates Fixed in
0.30.0
References Updated Mar 31, 2026 · Source: OSV.dev
CVE-2025-44005
GO-2025-4180
GHSA-h8cp-697h-8c8p
Dec 08, 2025
Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev
CVE-2025-66406
GO-2025-4181
GHSA-j7c9-79x7-8hpr
Dec 08, 2025
step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates Fixed in
0.29.0
References Updated Feb 04, 2026 · Source: OSV.dev |
v0.14.5-rc.2.100MB.badgerV2
pre
Dependencies (20)
+ 12 more |