Skip to content
OpenAdvisories

Package · Go

github.com/gardener/gardener

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.5
    CVE-2026-79767

    Gardener: Authorization Bypass via Group Subject Injection

    Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin's mustCheckProjectMembers manage-members check compares changes to User …

    gardener gardener github.com/gardener/gardener Go
  • Critical 9.9
    CVE-2025-47284

    Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation

    Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user wi…

    gardener gardener github.com/gardener/gardener Go
  • Critical 9.9
    CVE-2025-47283

    Bypassing project secret validation can lead to privilege escalation

    Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0 that could allow a user with administrative privileges…

    gardener gardener github.com/gardener/gardener Go