Stepsecurity vulnerabilities

Products

• Harden-runner 3

Newest

• step-security harden-runner Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier) CVE-2026-32947 Fix available 4.6 MediumMarch 17, 2026
• step-security harden-runner Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier) CVE-2026-32946 Fix available 4.6 MediumMarch 17, 2026
• step-security harden-runner Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier) CVE-2026-25598 Fix available 6.3 MediumFebruary 9, 2026