CVE-2025-23388
2 advisories.
Go/github.com/rancher/rancher CVE-2025-23388: high 8.2
Rancher allows an unauthenticated stack overflow in /v3-public/authproviders API
Action: Upgrade github.com/rancher/rancher to 2.8.13 or later.
go get github.com/rancher/rancher@v2.8.13go get github.com/rancher/rancher@v2.9.7go get github.com/rancher/rancher@v2.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.8.0 | 2.8.13 | - |
| 2.9.0 | 2.9.7 | - |
| 2.10.0 | 2.10.3 | - |
Fixed versions
| 2.8.13 | 2.9.7 | 2.10.3 |
Sources
- osv: GHSA-xr9q-h9c7-xw8q
- https://github.com/rancher/rancher/security/advisories/GHSA-xr9q-h9c7-xw8q
- https://github.com/rancher/rancher/pull/48608
- https://github.com/rancher/rancher/pull/48954
- https://github.com/rancher/rancher/pull/48957
- https://github.com/rancher/rancher/pull/48958
- https://github.com/rancher/rancher/commit/5c7aded42509ae526383bb296138e8ea0dff9d13
- https://github.com/rancher/rancher/commit/92d55b799ac172734106569b61ca87bbd5affcb2
- https://github.com/rancher/rancher/commit/a263bf3466717ee4bab802d499a5a167d274813d
- https://github.com/rancher/rancher/commit/de3ffa88cc75ae3da122bd36a4489663b5157ee3
- https://github.com/rancher/rancher
- https://github.com/rancher/rancher/releases/tag/v2.10.3
- https://github.com/rancher/rancher/releases/tag/v2.8.13
- https://github.com/rancher/rancher/releases/tag/v2.9.7
CVE-2025-23388 · published · modified · JSON
Go/github.com/rancher/rancher CVE-2025-23388: unknown
Rancher allows an unauthenticated stack overflow in /v3-public/authproviders API in github.com/rancher/rancher
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
CVE-2025-23388 · published · modified · JSON