SUSE Rancher Unauthenticated Webhook Regex Injection via Unsanitized URL (GHSA-jm4-m79g-g72r)

github.com 2026-07-06查看中文 →

Security AdvisoryGHSA-jm4-m79g-g72rHighRancher

Affected:

rancher/fleet >=0.15.0, <0.15.2
rancher/fleet >=0.14.0, <0.14.6
rancher/fleet >=0.13.0, <0.13.11
rancher/fleet >=0.12.0, <0.12.15

Fixed in:

v0.15.2
v0.14.6
v0.13.11
v0.12.15

Referenced CVEs: CVE-2026-44937

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

Perl HTTP-Tiny Cross-Origin Redirect Credential Leakage Fix 2026-07-08 HTTP::Tiny Cross-Origin Redirect Sensitive Header Leakage and Fix 2026-07-08 HTTP::Tiny maybe_redirect Credential Strip Bypass via Redirection 2026-07-08 AI Bridge LLM Proxy: Suspended Users Retain API Key Access (CVE-2026-55435) 2026-07-08 Coder albridged Authentication Bypass Fix: Inactive User Validation 2026-07-08

Offline Archive

Offline screenshot & PDF are Pro-exclusive