GO-2025-3648Published
Steve doesn’t verify a server’s certificate and is susceptible to man-in-the-middle (MitM) attacks
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2023-32198 · Microsoft / collected KEV context
cve-program · CVE-2023-32198
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32198
- https://github.com/rancher/steve/security/advisories/GHSA-95fc-g4gj-mqmx
euvd · EUVD-2023-60719
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32198
- https://github.com/rancher/steve/security/advisories/GHSA-95fc-g4gj-mqmx
nvd · CVE-2023-32198
- https://bugzilla.suse.com/show_bug.cgi?id=CVE-2023-32198
- https://github.com/rancher/steve/security/advisories/GHSA-95fc-g4gj-mqmx
osv · GHSA-95fc-g4gj-mqmx
- https://github.com/rancher/steve/security/advisories/GHSA-95fc-g4gj-mqmx
- https://github.com/rancher/steve
- https://pkg.go.dev/vuln/GO-2025-3648
osv · GO-2025-3648
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.