Description
In Rancher 2.0.0 through 2.1.5, project members have continued access to create, update, read, and delete namespaces in a project after they have been removed from it.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Go | github.com/rancher/rancher | >= 2.0.0, < 2.1.6 | 2.1.6 | GHSA-6r7x-4q7g-h83j |
| Go | github.com/rancher/rancher | >= 2.0.0+incompatible, < 2.1.6+incompatible | 2.1.6+incompatible | GO-2024-2764 |