tocsin

CVE-2025-66406

2 advisories.

Go/github.com/smallstep/certificates CVE-2025-66406: medium 5

step-ca Has Improper Authorization Check for SSH Certificate Revocation

Action: Upgrade github.com/smallstep/certificates to 0.29.0 or later.

go get github.com/smallstep/certificates@v0.29.0

Affected

introducedfixedlast affected
00.29.0-

Fixed versions

0.29.0

Sources

CVE-2025-66406 · published · modified · JSON

Go/github.com/smallstep/certificates CVE-2025-66406: unknown

step-ca Has Improper Authorization Check for SSH Certificate Revocation in github.com/smallstep/certificates

Action: Upgrade github.com/smallstep/certificates to 0.29.0 or later.

go get github.com/smallstep/certificates@v0.29.0

Affected

introducedfixedlast affected
00.29.0-

Fixed versions

0.29.0

Sources

CVE-2025-66406 · published · modified · JSON