All products

github.com/rancher/steve

Go · Package
2 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacksCVE-2023-32198 · GHSA-95FC-G4GJ-MQMXVersion ranges need review. github.com/rancher/steve Go High Fix reported
github.com/rancher/steve's users can issue watch commands for arbitrary resourcesCVE-2024-52280 · GHSA-J5HQ-5JCR-XWX7Version ranges need review. github.com/rancher/steve Go High Fix reported