{"action":"Upgrade github.com/rancher/rancher to 2.8.13 or later.","affected":[{"fixed":"2.8.13","introduced":"2.8.0"},{"fixed":"2.9.7","introduced":"2.9.0"},{"fixed":"2.10.3","introduced":"2.10.0"}],"component":"github.com/rancher/rancher","cve_ids":["CVE-2025-23388"],"ecosystem":"Go","epss":0.00603,"exploited":false,"fixed_versions":["2.8.13","2.9.7","2.10.3"],"ghsa_id":"GHSA-xr9q-h9c7-xw8q","id":"tcs_01M5KFSPCWTPWZ6VSHG1M8CX3R","modified_at":"2026-09-10T03:50:06.175648565Z","published_at":"2025-02-27T18:27:49Z","references":["https://osv.dev/vulnerability/GHSA-xr9q-h9c7-xw8q","https://github.com/rancher/rancher/security/advisories/GHSA-xr9q-h9c7-xw8q","https://github.com/rancher/rancher/pull/48608","https://github.com/rancher/rancher/pull/48954","https://github.com/rancher/rancher/pull/48957","https://github.com/rancher/rancher/pull/48958","https://github.com/rancher/rancher/commit/5c7aded42509ae526383bb296138e8ea0dff9d13","https://github.com/rancher/rancher/commit/92d55b799ac172734106569b61ca87bbd5affcb2","https://github.com/rancher/rancher/commit/a263bf3466717ee4bab802d499a5a167d274813d","https://github.com/rancher/rancher/commit/de3ffa88cc75ae3da122bd36a4489663b5157ee3","https://github.com/rancher/rancher","https://github.com/rancher/rancher/releases/tag/v2.10.3","https://github.com/rancher/rancher/releases/tag/v2.8.13","https://github.com/rancher/rancher/releases/tag/v2.9.7"],"severity":{"label":"high","score":8.2},"sources":[{"source":"osv","source_id":"GHSA-xr9q-h9c7-xw8q","url":"https://osv.dev/vulnerability/GHSA-xr9q-h9c7-xw8q"}],"summary":"Rancher allows an unauthenticated stack overflow in /v3-public/authproviders API"}