pkg:Go/github.com/smallstep/certificates

All known vulnerabilities

• CRITICAL10.0CVE-2026-30836step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates
  from 0, < 0.30.0
• CRITICAL10.0CVE-2026-30836step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates
  from 0, < 0.30.0
• CRITICAL10.0CVE-2025-44005Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates
  from 0, < 0.29.0
• CRITICAL10.0Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates
  from 0, < 0.29.0
• MEDIUM5.0step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates
  from 0, < 0.29.0
• MEDIUM5.0step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates
  from 0, < 0.29.0
• LOW3.7Step CA affected by an index out of bounds panic in TPM attestation EKU validation
  >= 0.24.0, < 0.30.0