github.com/rancher/steve
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/rancher/stevepage 1 of 1
- CVE-2023-32198HIGHCVSS 8.0EG 8.0fixed in 0.2.1, 0.3.3, 0.4.4 or 0.5.13, by version range2026-10-15
A vulnerability has been identified in Steve where by default it was using an insecure option that did not validate the certificate presented by the remote server while performing a TLS connection. This could allow the execution of a man-i…
- CVE-2024-52280HIGHCVSS 7.7EG 7.7fixed in 0.0.0-20241029132712-2175e090fe4b2025-04-11
A Exposure of Sensitive Information to an Unauthorized Actor vulnerability in SUSE rancher which allows users to watch resources they are not allowed to access, when they have at least some generic permissions on the type. This issue aff…
Check whether github.com/rancher/steve is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/rancher/steve CVEs against the assets you own.
Book a Demo →