Skip to content
OpenAdvisories

Vendor

garden-io

2 known vulnerabilities.

Products

garden 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.3
    CVE-2023-44392

    Arbitrary code execution vulnerability when using shared Kubernetes cluster

    Garden provides automation for Kubernetes development and testing. Prior tov ersions 0.13.17 and 0.12.65, Garden has a dependency on the cryo library, which is vulnerable to code injection due to an insecure implementation of deserialization. Garden stores se…

    garden-io garden
  • High 8.1
    CVE-2022-24829

    Missing authentication in Garden

    Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some operating modes this allows for an attacker to gain access to the application erroneously. The con…

    garden-io garden