Known Vulnerabilities for Step-ca by Smallstep
Listed below are 2 of the newest known vulnerabilities associated with "Step-ca" by "Smallstep".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-56450 json | AIL did not restrict repeated failed attempts to verify a two-factor authentication (OTP) code. An attacker who had reached t... | Not Provided | 2026-06-22 | 2026-06-22 |
| CVE-2026-54892 json | Inefficient algorithmic complexity in Plug's nested-parameter decoder allows an unauthenticated remote attacker to cause deni... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-53808 json | OpenClaw before 2026.5.6 contains an approval policy bypass vulnerability in the Skill Workshop apply flow that allows agent ... | Not Provided | 2026-06-11 | 2026-06-12 |
| CVE-2026-53655 json | node-tar is a full-featured Tar for Node.js. Prior to 7.5.16, tar (node-tar) applies a PAX extended header's size= record (an... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-53539 json | Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded ... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-52845 json | Caddy is an extensible server platform that uses TLS by default. Prior to 2.11.4, forward_auth copy_headers deletes the exact... | Not Provided | 2026-06-23 | 2026-06-23 |
| CVE-2026-49958 json | Hermes WebUI before version 0.51.303 contains a time-of-check time-of-use (TOCTOU) race condition vulnerability in the git_di... | Not Provided | 2026-06-09 | 2026-06-09 |
| CVE-2026-48684 json | FastNetMon Community Edition through 1.2.9 contains an out-of-bounds read in the NetFlow v9 options template parser. In proce... | Not Provided | 2026-05-26 | 2026-05-26 |
| CVE-2026-48513 json | MessagePack for C# is a MessagePack serializer for C#. Prior to 2.5.301 and 3.1.7, runtime-generated union deserializers emit... | Not Provided | 2026-06-22 | 2026-06-23 |
| CVE-2026-48128 json | Budibase is an open-source low-code platform. Prior to 3.39.0, the executeQuery automation step in Budibase accepts a queryId... | Not Provided | 2026-05-27 | 2026-05-27 |