Affected by GO-2025-3649 and 6 other vulnerabilities

GO-2025-3649: Fleet doesn’t validate a server’s certificate when connecting through SSH in github.com/rancher/fleet

GO-2025-3927: Rancher Fleet Helm Values are stored inside BundleDeployment in plain text in github.com/rancher/fleet

GO-2026-5207: Fleet: Helm impersonation bypass of `RESTClientGetter` retains `cluster-admin` during template rendering in github.com/rancher/fleet

GO-2026-5871: Fleet has PSS Bypass through addLabelsFromOptions in Fleet Agent in github.com/rancher/fleet

GO-2026-5873: Rancher Fleet has SSRF in Bundle Reader via Unvalidated Helm Repository URL in fleet.yaml in github.com/rancher/fleet

GO-2026-5874: Rancher Fleet has Unauthenticated Webhook: Regex Injection via Unsanitized Repository URL Components in github.com/rancher/fleet

GO-2026-5877: Rancher Fleet vulnerable to cross namespace secret disclosure via unvalidated `valuesFrom` references in Helm Deployer in github.com/rancher/fleet

namespace

package

v0.12.0 Latest Latest Go to latest Published: Mar 21, 2025 License: Apache-2.0 Imports: 3 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/rancher/fleet

Links

Open Source Insights

Documentation ¶

Index ¶

func GVK() schema.GroupVersionKind
func SystemRegistrationNamespace(systemNamespace string) string

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func GVK ¶

func GVK() schema.GroupVersionKind

func SystemRegistrationNamespace ¶

func SystemRegistrationNamespace(systemNamespace string) string

SystemRegistrationNamespace generates the name of the system registration namespace from the configured system namespace, e.g.: cattle-fleet-system -> cattle-fleet-clusters-system

Types ¶

This section is empty.

Source Files ¶

View all Source files

util.go

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL