Upgrade ZIPFoundation to version 0.9.18 or higher.

step-ca vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the step-ca package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
L CVE-2024-45337	<0.28.1-r1
L GHSA-v778-237x-gjrc	<0.28.1-r1
L GHSA-j7vj-rw65-4v26	<0.27.2-r1
L CVE-2024-34155	<0.27.2-r1
L CVE-2024-34158	<0.27.2-r1
L CVE-2024-34156	<0.27.2-r1
L GHSA-crqm-pwhx-j97f	<0.27.2-r1
L GHSA-8xfx-rj4p-23jm	<0.27.2-r1
L GHSA-xr7q-jx4m-x55m	<0.26.2-r3
L GHSA-hw49-2p59-3mhj	<0.26.2-r2
L CVE-2024-24791	<0.26.2-r2
M Information Exposure Through Log Files	<0.26.2-r1
L GHSA-v6v8-xj6m-xwqh	<0.26.2-r1
L GHSA-m5vv-6r4h-3vj9	<0.26.1-r3
M Race Condition	<0.26.1-r3
C CVE-2024-24790	<0.26.1-r2
M CVE-2024-24789	<0.26.1-r2
L GHSA-236w-p7wf-5ph8	<0.26.1-r2
L GHSA-49gw-vxvf-fc2g	<0.26.1-r2
L GHSA-2jwv-jmq4-4j3r	<0.26.1-r1
L CVE-2024-24787	<0.26.1-r1
L CVE-2024-24788	<0.26.1-r1
L GHSA-5fq7-4mxc-535h	<0.26.1-r1
L CVE-2023-45288	<0.26.0-r1
L GHSA-4v7x-pqxf-cx7m	<0.26.0-r1
L CVE-2024-24786	<0.25.2-r5
L GHSA-7jwh-3vrq-q3m8	<0.25.2-r5
L CVE-2024-27289	<0.25.2-r5
L CVE-2024-27304	<0.25.2-r5
L GHSA-8r3f-844c-mc37	<0.25.2-r5
L GHSA-mrww-27vc-gghv	<0.25.2-r5
L GHSA-m7wr-2xf7-cm9p	<0.25.2-r5
L CVE-2024-28180	<0.25.2-r4
L GHSA-c5q2-7r4c-mv6g	<0.25.2-r4
L GHSA-45x7-px36-x8w8	<0.25.2-r2
M Improper Validation of Integrity Check Value	<0.25.2-r2