Vulnerabilities in gardener
6 resultsCVE-2025-47282CRITICALMalicious google credential in DNS secret can lead to privilege escalationEPSS 0.7%CVE-2025-47283CRITICALBypassing project secret validation can lead to privilege escalationEPSS 0.7%CVE-2025-59823CRITICALGardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioningEPSS 0.5%CVE-2025-47284CRITICALGardener vulnerable to metadata injection for a project secret that can lead to privilege escalationEPSS 0.5%CVE-2026-79767MEDIUMGardener: Authorization Bypass via Group Subject InjectionEPSS 0.4%CVE-2025-67508HIGHgardenctl is vulnerable to Command Injection when used with non‑POSIX shellsEPSS 0.2%