smallstep Latest Vulnerabilities

Latest vulnerabilities published by smallstep

JSON RSS CSV 🔔 Create Alert Trigger

17 December 2025

Authorization Bypass in Smallstep Step CA ACME and SCEP Provisioner
CVE-2025-44005
SmallstepStep-ca10CRITICAL

3 December 2025

Improper Authorization Check in Step CA for SSH Certificate Revocation
CVE-2025-66406
SmallstepCertificates5MEDIUM