Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Fulcio-fips 1.6.6‑r3 could let attackers bypass protections

published 2 months ago

Summary

The Fulcio-fips software version 1.6.6‑r3 contains several security gaps that could allow a malicious user to get around its intended safeguards. This could expose your systems to unauthorized actions or data exposure. Update to the latest Fulcio-fips release as soon as possible to close these gaps.

Original advisory text

Security fixes in fulcio-fips 1.6.6-r3

Package fulcio-fips version 1.6.6-r3 fixes 7 vulnerabilities: CVE-2026-41178, ghsa-hrxh-6v49-42gf, ghsa-259r-337f-4rfw, CVE-2026-24137, CVE-2026-39821...

References

https://github.com/sigstore/fulcio URL

Timeline

Published1 Sep 2026

Updated2 Sep 2026

First seen2 Sep 2026

Sources

CLEANSTART-2026-VD81951 · OSV

Track software like this

Free during beta