Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
Modified: 9/8/2025
package
pkg:go/github.com/rancher/fleet
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text
Modified: 9/8/2025
Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering
Modified: 6/25/2026
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent
Modified: 7/7/2026
Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml
Modified: 7/7/2026
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components
Modified: 7/7/2026
Fleet doesn’t validate a server’s certificate when connecting through SSH
Modified: 5/5/2025
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer
Modified: 7/7/2026
Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet
Modified: 3/3/2026
Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet
Modified: 3/3/2026
Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering in github.com/rancher/fleet
Modified: 6/25/2026
Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent in github.com/rancher/fleet
Modified: 7/7/2026
Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml in github.com/rancher/fleet
Modified: 7/7/2026
Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet
Modified: 7/7/2026
Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer in github.com/rancher/fleet
Modified: 7/7/2026