GO-2026-5874

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet

En bref

Publiée
Mise à jour
CVE
CVE-2026-44937
Alias
GHSA-jmf4-m7j9-g72r

Description

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet

Paquets affectés

PaquetVersions
Go · github.com/rancher/fleetintroduced 0.12.0, fixed 0.12.15, introduced 0.13.0, fixed 0.13.11, introduced 0.14.0, fixed 0.14.6, introduced 0.15.0, fixed 0.15.2

Références

Sources

SourceLicence
OSV.devCC-BY 4.0 — Go Vulnerability Database