Gardener
6 CVEs across 4 Gardener products. Browse Gardener vulnerabilities, severities, and proof-of-concept exploits.
Gardener products with known CVEs
Gardener CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-67508 | High | 8.4 | 2025-12-12 | gardenctl is a command-line client for the Gardener which configures access to clusters and cloud provider CLI tools. When using non‑POSIX shells such as Fish… |
CVE-2025-59823 | Critical | 9.9 | 2025-09-25 | Project Gardener implements the automated management and operation of Kubernetes clusters as a service. Code injection may be possible in Gardener Extensions f… |
CVE-2025-47284 | Critical | 9.9 | 2025-05-19 | Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in the `gardenlet` comp… |
CVE-2025-47283 | Critical | 9.9 | 2025-05-19 | Gardener implements the automated management and operation of Kubernetes clusters as a service. A security vulnerability was discovered in Gardener prior to ve… |
CVE-2025-47282 | Critical | 9.9 | 2025-05-19 | Gardener External DNS Management is an environment to manage external DNS entries for a kubernetes cluster. A security vulnerability was discovered in Gardener… |
CVE-2019-12494 | High | 8.5 | 2019-06-05 | In Gardener before 0.20.0, incorrect access control in seed clusters allows information disclosure by sending HTTP GET requests from one's own shoot clusters t… |
CVE-2018-2475 | High | 8.5 | 2018-10-09 | Following the Gardener architecture, the Kubernetes apiserver of a Gardener managed shoot cluster resides in the corresponding seed cluster. Due to missing net… |