8675 matches found
EUVD-2022-15759
Malicious code in bioql PyPI...
EUVD-2023-33614
Malicious code in bioql PyPI...
EUVD-2023-0288
Malicious code in bioql PyPI...
EUVD-2023-0306
Malicious code in bioql PyPI...
EUVD-2022-5321
Malicious code in bioql PyPI...
EUVD-2022-4873
Malicious code in bioql PyPI...
EUVD-2022-2488
Malicious code in bioql PyPI...
EUVD-2022-1885
Malicious code in bioql PyPI...
EUVD-2024-2462
Malicious code in bioql PyPI...
EUVD-2022-4978
Malicious code in bioql PyPI...
EUVD-2022-3123
Malicious code in bioql PyPI...
EUVD-2022-6888
Malicious code in bioql PyPI...
EUVD-2022-4623
Malicious code in bioql PyPI...
CVE-2025-59823
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...
GHSA-227X-7MH8-3CF6 Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning
Impact A security vulnerability was discovered in Gardener when Terraformer is used for infrastructure provisioning. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This CVE...
Arbitrary Code Injection
Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the Terraformer process. An attacker can execute arbitrary code with elevated privileges by injecting malicious Terraform configurations during infrastructure provisioning. Note: This is only exploitable if ...
Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning
Impact A security vulnerability was discovered in Gardener when Terraformer is used for infrastructure provisioning. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This CVE...
CVE-2025-59823
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...
CVE-2025-59823 Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning
Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...
