github.com/gardener/gardener
Go · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Gardener: Authorization Bypass via Group Subject Injection | github.com/gardener/gardener | Go | Medium | Fix reported | |
| Gardener allows metadata injection for a project secret which can lead to privilege escalation | github.com/gardener/gardener | Go | Critical | Fix reported | |
| Gardener allows bypassing project secret validation which can lead to privilege escalation | github.com/gardener/gardener | Go | Critical | Fix reported |