Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2025-44005
10
CRITICALCVSS v3
Severity scale
010
Description
An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.
smallstep/certificates
GitHub🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.
GitHub🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.NVD