tocsin

Go/github.com/rancher/rancher CVE-2025-23388: high 8.2, EPSS 0.60%

Rancher allows an unauthenticated stack overflow in /v3-public/authproviders API

Action: Upgrade github.com/rancher/rancher to 2.8.13 or later.

go get github.com/rancher/rancher@v2.8.13
go get github.com/rancher/rancher@v2.9.7
go get github.com/rancher/rancher@v2.10.3

Affected

introducedfixedlast affected
2.8.02.8.13-
2.9.02.9.7-
2.10.02.10.3-

Fixed versions

2.8.132.9.72.10.3

Sources

CVE-2025-23388 · published · modified · JSON