TI-2026-55244 CVE-2026-79767 · GHSA-gfjv-gqf2-c888
Gardener: Authorization Bypass via Group Subject Injection
Priority LOW 25
Gardener implements the automated management and operation of Kubernetes clusters as a service.
Vulnerabilities
8 records
TI-2025-41264 CVE-2025-67508 · GHSA-fw33-qpx7-rhx2
gardenctl is vulnerable to Command Injection when used with non‑POSIX shells
Priority LOW 38
gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools.
TI-2025-37262 CVE-2025-59823 · GHSA-227x-7mh8-3cf6
Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning
Priority MEDIUM 43
Project Gardener implements the automated management and operation of Kubernetes clusters as a service.
TI-2025-29814 CVE-2025-47284 · GHSA-9x73-87fh-54w9
Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation
Priority MEDIUM 43
Gardener implements the automated management and operation of Kubernetes clusters as a service.
TI-2025-29813 CVE-2025-47283 · GHSA-3hw7-qj9h-r835
Bypassing project secret validation can lead to privilege escalation
Priority MEDIUM 44
Gardener implements the automated management and operation of Kubernetes clusters as a service.
TI-2025-29812 CVE-2025-47282 · GHSA-xwgg-m7fx-83wx
Malicious google credential in DNS secret can lead to privilege escalation
Priority MEDIUM 44
Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster.
TI-2019-09329 CVE-2019-12494 · GHSA-9j69-f6q8-h6wm
In Gardener before 0.20.0, incorrect access control in seed clusters allows information…
Priority MEDIUM 41
In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters to foreign shoot clusters.
TI-2018-01854 CVE-2018-2475 · GHSA-g482-4r7c-68g6
Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot…
Priority MEDIUM 40
Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster.