Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user in github.com/rancher/rancher

GHSA-hwm2-4ph6-w6m5 · GO-2026-4590 · 10/03/2026 公開 · 23/03/2026 更新

要点

パッケージ	影響を受けるバージョン	修正済みバージョン
github.com/rancher/rancher Go	`≥ 2.0.0+incompatible`	修正版なし

Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user in github.com/rancher/rancher.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/rancher/rancher before v2.6.4.

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

パッケージ

影響を受けるバージョン

修正済みバージョン

≥ 2.0.0+incompatible

修正版なし

概要

Rancher's restricted PodSecurityPolicy does not prevent containers from running as a privileged user in github.com/rancher/rancher.

NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions.

(If this is causing false-positive reports from vulnerability scanners, please suggest an edit to the report.)

The additional affected modules and versions are: github.com/rancher/rancher before v2.6.4.

github.com/rancher/rancher のその他の脆弱性

すべて見る →