gardener/gardener Security Advisories | GitStock

medium2026-09-22

CVE-2026-79767-Gardener: Authorization Bypass via Group Subject Injection

GHSA-gfjv-gqf2-c888

critical2025-05-19

CVE-2025-47284-Gardener allows metadata injection for a project secret which can lead to privilege escalation

GHSA-9x73-87fh-54w9

critical2025-05-19

CVE-2025-47283-Gardener allows bypassing project secret validation which can lead to privilege escalation

GHSA-3hw7-qj9h-r835