Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

go

github.com/rancher/fleet

go

View on github.com · View on proxy.golang.org

Security Advisories for github.com/rancher/fleet in go

Critical
about 11 hours ago

Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer GSA_kwCzR0hTQS14cjY1LTVjcG0tZzM2eM4ABZ_n

go github.com/rancher/fleet
Moderate
about 11 hours ago

Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml GSA_kwCzR0hTQS1oeDR2LWN4cGYtdmg4bc4ABZ_m

go github.com/rancher/fleet
High
about 11 hours ago

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components GSA_kwCzR0hTQS1qbWY0LW03ajktZzcycs4ABZ_k

go github.com/rancher/fleet
High
about 11 hours ago

Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent GSA_kwCzR0hTQS04NjRnLTg2M20tdmN2cc4ABZ_j

go github.com/rancher/fleet
Critical
about 2 months ago

Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering GSA_kwCzR0hTQS03NjVqLXFmcnAtaG0zas4ABWXh

go github.com/rancher/fleet
High
10 months ago

Rancher Fleet Helm Values are stored inside BundleDeployment in plain text GSA_kwCzR0hTQS02aDl4LTlqNXYtN3c5aM4ABLkt

go github.com/rancher/fleet
Moderate
about 1 year ago

Fleet doesn’t validate a server’s certificate when connecting through SSH GSA_kwCzR0hTQS14Z3BjLXE4OTktNjdwOM4ABHLZ

go github.com/rancher/fleet

Filter by Severity

High 3 Moderate 2 Critical 2