{"action":"Upgrade github.com/rancher/rancher to 2.2.5-rc6.0.20190621200032-0ddffe484adc+incompatible or later.","affected":[{"fixed":"2.2.5-rc6.0.20190621200032-0ddffe484adc+incompatible","introduced":"0"}],"component":"github.com/rancher/rancher","cve_ids":["CVE-2019-13209"],"ecosystem":"Go","epss":0.01099,"exploited":false,"fixed_versions":["2.2.5-rc6.0.20190621200032-0ddffe484adc+incompatible"],"ghsa_id":"GHSA-xhg2-rvm8-w2jh","id":"tcs_01M5KFWNDSG64A3FN66A4TBS58","modified_at":"2026-06-16T13:29:14.968193604Z","published_at":"2021-05-18T15:42:40Z","references":["https://osv.dev/vulnerability/GO-2022-0755","https://github.com/advisories/GHSA-xhg2-rvm8-w2jh","https://github.com/rancher/rancher/commit/0ddffe484adccb9e37d9432e8e625d8ebbfb0088","https://forums.rancher.com/t/rancher-release-v2-2-5-addresses-rancher-cve-2019-13209/14801"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2022-0755","url":"https://osv.dev/vulnerability/GO-2022-0755"}],"summary":"Cross-site request forgery in github.com/rancher/rancher"}