GO-2026-5877
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer in github.com/rancher/fleet
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2026-44935
- Alias
- GHSA-xr65-5cpm-g36x
Description
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer in github.com/rancher/fleet
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/rancher/fleet | introduced 0.12.0, fixed 0.12.15, introduced 0.13.0, fixed 0.13.11, introduced 0.14.0, fixed 0.14.6, introduced 0.15.0, fixed 0.15.2 |
Références
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |