GO-2025-3927
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet
At a glance
- Published
- Updated
- CVE
- CVE-2024-52284
- Aliases
- GHSA-6h9x-9j5v-7w9h
Description
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet
Affected packages
| Package | Versions |
|---|---|
| Go · github.com/rancher/fleet | introduced 0.11.0, fixed 0.11.10, introduced 0.12.0, fixed 0.12.6, introduced 0.13.0, fixed 0.13.1-0.20250806151509-088bcbea7edb |
References
- https://github.com/rancher/fleet/security/advisories/GHSA-6h9x-9j5v-7w9h ADVISORY
- https://github.com/rancher/fleet/commit/088bcbea7edb844d7e6fc3649d9954f763cf68a9 FIX
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |