CVE-2025-44005

2 advisories.

Go/github.com/smallstep/certificates CVE-2025-44005: critical 10, EPSS 9.09%

Step CA Has Authorization Bypass in ACME and SCEP Provisioners

Action: Upgrade github.com/smallstep/certificates to 0.29.0 or later.

go get github.com/smallstep/certificates@v0.29.0

Affected

introduced	fixed	last affected
0	0.29.0	-

Fixed versions

0.29.0

Sources

CVE-2025-44005 · published 2025-12-03T17:00:03Z · modified 2026-09-10T03:50:31.905684909Z · JSON

Go/github.com/smallstep/certificates CVE-2025-44005: unknown, EPSS 9.09%

Step CA Has Authorization Bypass in ACME and SCEP Provisioners in github.com/smallstep/certificates

Action: Upgrade github.com/smallstep/certificates to 0.29.0 or later.

go get github.com/smallstep/certificates@v0.29.0

Affected

introduced	fixed	last affected
0	0.29.0	-

Fixed versions

0.29.0

Sources

CVE-2025-44005 · published 2025-12-08T21:31:36Z · modified 2026-02-04T03:46:23.225547Z · JSON