https://github.com/Pig-Tail

Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory

Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet

Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver

Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole