[CVE-2025-66406] ARBITRARY SSH CERTIFICATE REVOCATION ON STEP-CA

Recently, our team performed a security audit of SmallStep Certificates PKI. This audit was focused on the cryptographic aspects of the PKI, mainly the keys and certificates management and storage, certificates transfer, API security and code review.