Skip to content
OpenAdvisories

Product · smallstep

Step-CA

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-44005

    Step CA Has Authorization Bypass in ACME and SCEP Provisioners

    An attacker can bypass authorization checks and force a Step CA ACME or SCEP provisioner to create certificates without completing certain protocol authorization checks.

    smallstep Step-CA caddy caddy-man Alpine Wolfi Go