Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
step-issuer could let attackers bypass controls
published 7 months ago
Summary
The step-issuer component in your system has several weaknesses that could let a malicious user perform actions they shouldn’t be able to. The problems are fixed in newer versions (0.10.2‑r0, 0.9.10‑r0, 0.9.9‑r0, 0.9.9‑r1). Update to one of these releases as soon as possible to protect your environment.
What to do
- Update cleanstart step-issuer to version 0.9.9-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | step-issuer |
< 0.9.9-r1 Fix: upgrade to 0.9.9-r1
|
Original advisory text
Security fixes for CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61729, CVE-2025-62820, CVE-2026-25793, CVE-2026-30836 applied in versions: 0.10.2-r0, 0.9.10-r0, 0.9.9-r0, 0.9.9-r1
Multiple security vulnerabilities affect the step-issuer package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-58183 URL
- https://osv.dev/vulnerability/CVE-2025-58185 URL
- https://osv.dev/vulnerability/CVE-2025-58187 URL
- https://osv.dev/vulnerability/CVE-2025-58188 URL
- https://osv.dev/vulnerability/CVE-2025-58189 URL
- https://osv.dev/vulnerability/CVE-2025-61723 URL
- https://osv.dev/vulnerability/CVE-2025-61724 URL
- https://osv.dev/vulnerability/CVE-2025-61725 URL
- https://osv.dev/vulnerability/CVE-2025-61729 URL
- https://osv.dev/vulnerability/CVE-2025-62820 URL
- https://osv.dev/vulnerability/CVE-2026-25793 URL
- https://osv.dev/vulnerability/CVE-2026-30836 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58183 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58185 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58187 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58188 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58189 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61723 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61724 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61725 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-61729 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-62820 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25793 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-30836 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-CV29689 · OSV
Track software like this
Free during beta