gardener vulnerabilities
6 published CVEs name gardener among the affected products.
- Published CVEs
- 6
- Last 12 months
- 2
- Critical
- 4
- Known exploited
- 0
Critical 4High 1Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20255
- 20261
Newest CVEs
- CVE-2026-79767
Gardener: Authorization Bypass via Group Subject Injection
gardener · gardener
Medium5.5 - CVE-2025-67508
gardenctl is vulnerable to Command Injection when used with non‑POSIX shells
gardener · gardenctl-v2
High8.0 - CVE-2025-59823
Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning
gardener · gardener-extension-provider-aws
Critical9.9 - CVE-2025-47284
Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation
gardener · gardener
Critical9.9 - CVE-2025-47283
Bypassing project secret validation can lead to privilege escalation
gardener · gardener
Critical9.9 - CVE-2025-47282
Malicious google credential in DNS secret can lead to privilege escalation
gardener · external-dns-management
Critical9.9