Skip to content
OpenAdvisories

Package · Go

github.com/gardener/gardener

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.5
    CVE-2026-79767

    Gardener: Authorization Bypass via Group Subject Injection

    Gardener implements the automated management and operation of Kubernetes clusters as a service. Prior to 1.142.6, 1.143.3, 1.144.2, and 1.145.0, the customverbauthorizer admission plugin's mustCheckProjectMembers manage-members check compares changes to User …

    gardener gardener github.com/gardener/gardener Go