{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"github.com/rancher/rancher","cve_ids":["CVE-2023-22650"],"ecosystem":"Go","epss":0.00607,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-9ghh-mmcq-8phc","id":"tcs_01M5KG3YETQXCD033SJSBE1VBG","modified_at":"2026-07-02T14:44:23.476320072Z","published_at":"2024-06-28T15:28:30Z","references":["https://osv.dev/vulnerability/GO-2024-2931","https://github.com/rancher/rancher/security/advisories/GHSA-9ghh-mmcq-8phc"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2024-2931","url":"https://osv.dev/vulnerability/GO-2024-2931"}],"summary":"Rancher does not automatically clean up a user deleted or disabled from the configured Authentication Provider in github.com/rancher/rancher"}