Skip to main content
VulnerabilityPublished 07/30/2026Updated 09/09/2026

Security fixes in fulcio 1.8.2-r0

Affects fulcioSource GCVE Database

0

Fixed in 1.8.2-r0 : update fulcio when convenient.

Data as of 09/09/2026, 13:35:53 UTC

Severity
Medium

Rated by Threat Radar

Patch
Available – fixed in 1.8.2-r0

What to do

Affected software

ProductAffectedFixed in
CleanStartfulcioAffected
  • <1.8.2-r0
  • =1.8.2-r0
Fixed in
  • 1.8.2-r0

Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.

AI-suggested

Users should upgrade to fulcio version 1.8.2-r0 to apply the security fixes for the two identified vulnerabilities. Since this is a standard package update, no additional mitigation steps are indicated.

Description

Fulcio version 1.8.2-r0 addresses two security vulnerabilities identified by GHSA identifiers ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x. This release includes security fixes to remediate these issues. No CVSS score or detailed impact information is provided. There are no known exploits in the wild related to these vulnerabilities. The package is not a cloud service, so remediation requires applying this fixed version.

Impact

The vulnerabilities fixed in fulcio 1.8.2-r0 could potentially affect users of earlier versions of the package. Since no detailed impact or exploit information is provided, the exact consequences of these vulnerabilities remain unspecified. There are no known active exploits in the wild.

Summary

The fulcio package version 1.8.2-r0 contains fixes for two distinct vulnerabilities referenced by GHSA identifiers ghsa-f6x5-jh6r-wrfv and ghsa-j5w8-q4qc-rx2x. The exact nature of these vulnerabilities is not detailed in the provided data. The release is confirmed to be a security update addressing these issues. No CVSS or severity metrics are available, and no active exploitation has been reported.

References

Community reviews

Loading reviews…