EUVD-2022-6335

Malicious code in bioql PyPI...

EUVD-2022-2488

Malicious code in bioql PyPI...

EUVD-2022-2743

Malicious code in bioql PyPI...

EUVD-2022-3506

Malicious code in bioql PyPI...

EUVD-2024-44547

Malicious code in bioql PyPI...

EUVD-2022-3123

Malicious code in bioql PyPI...

EUVD-2023-0306

Malicious code in bioql PyPI...

EUVD-2022-5812

Malicious code in bioql PyPI...

EUVD-2022-4019

Malicious code in bioql PyPI...

EUVD-2022-3715

Malicious code in bioql PyPI...

EUVD-2022-3595

Malicious code in bioql PyPI...

EUVD-2023-58939

Malicious code in bioql PyPI...

EUVD-2022-5025

Malicious code in bioql PyPI...

EUVD-2022-4553

Malicious code in bioql PyPI...

EUVD-2022-4623

Malicious code in bioql PyPI...

CVE-2025-59823

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...

GHSA-227X-7MH8-3CF6 Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning

Impact A security vulnerability was discovered in Gardener when Terraformer is used for infrastructure provisioning. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This CVE...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the Terraformer process. An attacker can execute arbitrary code with elevated privileges by injecting malicious Terraform configurations during infrastructure provisioning. Note: This is only exploitable if ...

Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning

Impact A security vulnerability was discovered in Gardener when Terraformer is used for infrastructure provisioning. This vulnerability could allow a user with administrative privileges for a Gardener project to obtain control over the seed cluster where the shoot cluster is managed. This CVE...

CVE-2025-59823

Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions for AWS providers prior to version 1.64.0, Azure providers prior to version 1.55.0, OpenStack providers prior to version 1.49.0, and GCP...