EUVD-2022-4873

Malicious code in bioql PyPI...

EUVD-2022-3506

Malicious code in bioql PyPI...

EUVD-2022-4978

Malicious code in bioql PyPI...

EUVD-2022-5404

Malicious code in bioql PyPI...

EUVD-2022-3123

Malicious code in bioql PyPI...

EUVD-2022-4542

Malicious code in bioql PyPI...

EUVD-2022-3323

Malicious code in bioql PyPI...

EUVD-2022-4974

Malicious code in bioql PyPI...

EUVD-2022-2957

Malicious code in bioql PyPI...

EUVD-2022-2682

Malicious code in bioql PyPI...

EUVD-2022-3382

Malicious code in bioql PyPI...

EUVD-2022-4019

Malicious code in bioql PyPI...

EUVD-2022-6627

Malicious code in bioql PyPI...

EUVD-2022-1008

Malicious code in bioql PyPI...

EUVD-2022-4623

Malicious code in bioql PyPI...

CVE-2025-59823

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...

GHSA-227X-7MH8-3CF6 Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning

Impact A security vulnerability was discovered in Gardener when Terraformer is used for infrastructure provisioning. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This CVE...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the Terraformer process. An attacker can execute arbitrary code with elevated privileges by injecting malicious Terraform configurations during infrastructure provisioning. Note: This is only exploitable if ...

Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning

Impact A security vulnerability was discovered in Gardener when Terraformer is used for infrastructure provisioning. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This CVE...

CVE-2025-59823

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...