EUVD-2025-15744

Malicious code in bioql PyPI...

GO-2025-3698 Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener...

GO-2025-3696 Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener...

CVE-2025-47284 Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation

Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the gardenlet component of Gardener prior to versions 1.116.4, 1.117.5, 1.118.2, and 1.119.0. It could allow a user with administrative privileges for a...