VDB
KO

GO-2026-5874

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet

Details

Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/rancher/fleet
Introduced in: 0.12.0 Fixed in: 0.12.15
Fix go get github.com/rancher/fleet@v0.12.15

References