{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"2.0.0+incompatible"}],"component":"github.com/rancher/rancher","cve_ids":["CVE-2021-31999"],"ecosystem":"Go","epss":0.01052,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-pvxj-25m6-7vqr","id":"tcs_01M5KG2TRPABV66RWVNXCPQ6CG","modified_at":"2026-07-10T13:44:30.527231997Z","published_at":"2024-06-10T16:39:03Z","references":["https://osv.dev/vulnerability/GO-2024-2778","https://github.com/advisories/GHSA-pvxj-25m6-7vqr","https://nvd.nist.gov/vuln/detail/CVE-2021-31999","https://bugzilla.suse.com/show_bug.cgi?id=1187084"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2778","url":"https://osv.dev/vulnerability/GO-2024-2778"}],"summary":"Rancher Privilege escalation vulnerability via malicious \"Connection\" header in github.com/rancher/rancher"}