https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:09:07 +0000 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0563 certfr-2025-avi-0563 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0563 https://cve.radiocsirt.org/vuln/euvd-2026-230084 EUVD-2026-230084 https://cve.radiocsirt.org/vuln/euvd-2026-230084 https://cve.radiocsirt.org/vuln/fkie_cve-2025-23388 <p>A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.</p> <p>A Stack-based Buffer Overflow vulnerability in SUSE rancher allows for denial of service.This issue affects rancher: from 2.8.0 before 2.8.13, from 2.9.0 before 2.9.7, from 2.10.0 before 2.10.3.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-23388 https://cve.radiocsirt.org/vuln/ghsa-xr9q-h9c7-xw8q <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact An unauthenticated stack overflow crash, leading to a denial of service (DoS), was identified in Rancher’s `/v3-public/authproviders` public API endpoint. A malicious user could submit data to the API which would cause the Rancher server to crash, but no malicious or incorrect data would actually be written in the API. The downstream clusters, i.e., the clusters managed by Rancher, are not affected by this issue.</p> <p>This vulnerability affects those using external authentication providers as well as Rancher’s local authentication.</p> <p>### Patches The patch includes the removal of unnecessary HTTP methods of the specific API.</p> <p>Patched versions include releases `v2.8.13`, `v2.9.7` and `v2.10.3`.</p> <p>### Workarounds There are no workarounds for this issue. Users are recommended to upgrade, as soon as possible, to a version of Rancher Manager that contains the fix.</p> <p>### References If you have any questions or comments about this advisory: - Reach out to the [SUSE Rancher Security team](https://github.com/rancher/rancher/security/policy) for security related inquiries. - Open an issue in the [Rancher](https://github.com/rancher/rancher/issues/new/choose) repository. - Verify with our [support matrix](https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/) and [product support lifecycle](https://www.suse.com/lifecycle/).</p> <p><strong>Affected:</strong> Go: github.com/rancher/rancher</p> <p>### Impact An unauthenticated stack overflow crash, leading to a denial of service (DoS), was identified in Rancher’s `/v3-public/authproviders` public API endpoint. A malicious user could submit data to the API which would cause the Rancher server to crash, but no malicious or incorrect data would actually be written in the API. The downstream clusters, i.e., the clusters managed by Rancher, are not affected by this issue.</p> <p>This vulnerability affects those using external authentication providers as well as Rancher’s local authentication.</p> <p>### Patches The patch includes the removal of unnecessary HTTP methods of the specific API.</p> <p>Patched versions include releases `v2.8.13`, `v2.9.7` and `v2.10.3`.</p> <p>### Workarounds There are no workarounds for this issue. Users are recommended to upgrade, as soon as possible, to a version of Rancher Manager that contains the fix.</p> <p>### References If you have any questions or comments about this advisory: - Reach out to the [SUSE Rancher Security team](https://github.com/rancher/rancher/security/policy) for security related inquiries. - Open an issue in the [Rancher](https://github.com/rancher/rancher/issues/new/choose) repository. - Verify with our [support matrix](https://www.suse.com/suse-rancher/support-matrix/all-supported-versions/) and [product support lifecycle](https://www.suse.com/lifecycle/).</p> https://cve.radiocsirt.org/vuln/ghsa-xr9q-h9c7-xw8q https://cve.radiocsirt.org/vuln/opensuse-su-2025:14889-1 <p>govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media</p> <p>govulncheck-vulndb-0.0.20250312T181707-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:14889-1 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0457 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Dateien zu manipulieren, administrative Rechte zu erlangen und einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Rancher ausnutzen, um Dateien zu manipulieren, administrative Rechte zu erlangen und einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0457