Fulcio: Security fixes for ghsa-f6x5-jh6r-wrfv, ghsa-j5w8-q4qc-rx2x applied in versions: 1.8.2-r0
Affects fulcioSource GCVE Database
Fixed in 1.8.2-r0 : update fulcio when convenient.
Data as of 09/09/2026, 13:41:39 UTC
Rated by Threat Radar
- Patch
- Available – fixed in 1.8.2-r0
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartfulcio | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Upgrade fulcio to version 1.8.2-r0 or later, where the security vulnerabilities have been fixed. Since this is not a cloud service, manual patching is required. No additional mitigation guidance is provided.
Description
Multiple security vulnerabilities have been identified in the fulcio package. These vulnerabilities are addressed in version 1.8.2-r0. No specific details about the nature of the vulnerabilities or their impact are provided in the available data. There are no known exploits in the wild related to these issues. Users of fulcio should upgrade to version 1.8.2-r0 to mitigate these vulnerabilities.
Impact
The vulnerabilities could potentially affect the security posture of systems using the fulcio package prior to version 1.8.2-r0. However, no known exploits in the wild have been reported. The lack of detailed impact information limits precise assessment, but the presence of multiple security issues suggests a moderate risk if unpatched.
Summary
The fulcio package contained multiple security vulnerabilities that have been resolved in version 1.8.2-r0. The exact technical details and impact of these vulnerabilities are not specified in the provided information. The vulnerabilities were tracked under identifiers ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x, and are referenced in the CleanStart ecosystem. Patch availability is confirmed, and the package is not a cloud service, so remediation requires upgrading the software.