Threats affecting pkg:github/Fleett

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.9	EPSS 0.2%	CVE-2026-104615SUSE Rancher · Authentication Bypass by Spoofing High7.9EPSS 0.2%2026-10-30CVE Database V5CVE-2026-104615 CVE-2026-104615 is an authentication bypass vulnerability in SUSE Rancher Fleet's cluster registration flow. It allows a registration request to claim a cluster identity without proper binding to the registration token, potentially enabling unauthorized association with a different managed cluster's identity. This affects multiple versions of SUSE Rancher Fleet prior to fixed releases 0.16.3, 0.15.17, 0.14.12, and 0.13.17. EPSS 0.2%Vulnerability CWE-290	CVE Database V5	2026-10-30
Critical	9.9	EPSS 0.5%	CVE-2026-44935SUSE Rancher · Improper validation of specified type of input Critical9.9EPSS 0.5%2026-07-02CVE Database V5CVE-2026-44935 Missing validation of "valuesFrom" references in Helm Deployer of SUSE Rancher Fleet 0.15 before 0.15.2, 0.14 before 0.14.6, 0.13 before 0.13.11 and 0.12 before 0.12.15 could be used by owners of one tenant to access fleet credentials of other tenants. EPSS 0.5%Vulnerability CWE-1287	CVE Database V5	2026-07-02

Page 1 of 1