Skip to main content

Vendor/product archive

linuxfoundation / fulcio CVEs

Beta · best-effort

2 CVEs tagged to linuxfoundation / fulcio0 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2026-22772

Published Jan 12, 2026

Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.5, Fulcio's metaRegex() function uses unanchored regex,…

CVSS 5.8 · Medium
evidence mentions
2
Buzz score
16.0
Vendor/product tagsBeta · best-effort

CVE-2025-66506

Published Dec 4, 2025

Fulcio is a free-to-use certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity. Prior to 1.8.3, function identity.extractIssuerURL split…

CVSS 7.5 · High
Vendor/product tagsBeta · best-effort
Showing 1-2 of 2 CVEsPage 1 of 1