CVE-2026-30836
2 advisories.
Go/github.com/smallstep/certificates CVE-2026-30836: critical 10
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18)
Action: Upgrade github.com/smallstep/certificates to 0.30.0 or later.
go get github.com/smallstep/certificates@v0.30.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.0 | - |
Fixed versions
| 0.30.0 |
Sources
- osv: GHSA-q4r8-xm5f-56gw
- https://github.com/smallstep/certificates/security/advisories/GHSA-q4r8-xm5f-56gw
- https://nvd.nist.gov/vuln/detail/CVE-2026-30836
- https://github.com/smallstep/certificates/commit/e6da031d5125cfd99fe9a26f74bb41e4dacca4ef
- https://github.com/smallstep/certificates
- https://github.com/smallstep/certificates/releases/tag/v0.30.0-rc7
CVE-2026-30836 · published · modified · JSON
Go/github.com/smallstep/certificates CVE-2026-30836: unknown
step-ca has Unauthenticated Certificate Issuance via SCEP UpdateReq (MessageType=18) in github.com/smallstep/certificates
Action: Upgrade github.com/smallstep/certificates to 0.30.0 or later.
go get github.com/smallstep/certificates@v0.30.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.30.0 | - |
Fixed versions
| 0.30.0 |
Sources
- osv: GO-2026-4775
- https://github.com/smallstep/certificates/security/advisories/GHSA-q4r8-xm5f-56gw
- https://nvd.nist.gov/vuln/detail/CVE-2026-30836
- https://github.com/smallstep/certificates/commit/e6da031d5125cfd99fe9a26f74bb41e4dacca4ef
- https://github.com/smallstep/certificates/releases/tag/v0.30.0-rc7
CVE-2026-30836 · published · modified · JSON