Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Fulcio 1.5.1‑r0 may let attackers bypass security checks

published 2 months ago

Summary

The Fulcio software version 1.5.1‑r0 contains several flaws that could let an unauthorized user trick the system into accepting malicious code or certificates. This could undermine trust in the software signing process you rely on. Upgrade to the latest Fulcio release as soon as possible to close these gaps.

Original advisory text

Security fixes in fulcio 1.5.1-r0

Package fulcio version 1.5.1-r0 fixes 5 vulnerabilities: CVE-2025-27144, CVE-2026-34986, CVE-2025-30204, CVE-2026-41178, ghsa-hrxh-6v49-42gf

References

https://github.com/sigstore/fulcio URL

Timeline

Published1 Sep 2026

Updated2 Sep 2026

First seen2 Sep 2026

Sources

CLEANSTART-2026-XV09943 · OSV

Track software like this

Free during beta