CVE-2021-31999

Go/github.com/rancher/rancher CVE-2021-31999: high 8.8, EPSS 1.05%

Rancher Privilege escalation vulnerability via malicious "Connection" header

Action: Upgrade github.com/rancher/rancher to 2.4.16 or later.

go get github.com/rancher/rancher@v2.4.16

go get github.com/rancher/rancher@v2.5.9

Affected

Fixed versions

Sources

• osv: GHSA-pvxj-25m6-7vqr
• https://nvd.nist.gov/vuln/detail/CVE-2021-31999
• https://bugzilla.suse.com/show_bug.cgi?id=1187084
• https://github.com/rancher/rancher
• https://pkg.go.dev/vuln/GO-2024-2778

CVE-2021-31999 · published 2024-04-24T21:01:59Z · modified 2026-09-10T03:50:12.767658643Z · JSON

Go/github.com/rancher/rancher CVE-2021-31999: unknown, EPSS 1.05%

Rancher Privilege escalation vulnerability via malicious "Connection" header in github.com/rancher/rancher

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2024-2778
• https://github.com/advisories/GHSA-pvxj-25m6-7vqr
• https://nvd.nist.gov/vuln/detail/CVE-2021-31999
• https://bugzilla.suse.com/show_bug.cgi?id=1187084

CVE-2021-31999 · published 2024-06-10T16:39:03Z · modified 2026-07-10T13:44:30.527231997Z · JSON