g
gardener
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 7 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 9, 2018 to present
7
Total CVEs
6
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
8.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
43/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
4High
2Medium
1Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
3Age Distribution
Common Weaknesses (CWE)
1
Input Validation
3
2
Code Injection
1
Most Affected Products
1. Gardener Gardener10
2. go/github.com/gardener/gardener7
3. go/gardener/gardener2
4. Gardener gardenlet2
5. Gardener Extensions for AWS1
Recent Vulnerabilities
See more →CVE-2026-79767
CVSS 5.5medium
Gardener: Authorization Bypass via Group Subject Injection
Sep 22, 2026
CVE-2025-59823
CVSS 9.9critical
Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning
Sep 25, 2025
CVE-2025-47284
CVSS 9.9EPSS 0%critical
Gardener vulnerable to metadata injection for a project secret that can lead to privilege escalation
May 19, 2025
CVE-2025-47283
CVSS 9.9EPSS 0%critical
Bypassing project secret validation can lead to privilege escalation
May 19, 2025
CVE-2025-47282
CVSS 9.9EPSS 0%critical
Malicious google credential in DNS secret can lead to privilege escalation
May 19, 2025
CVE-2019-12494
CVSS 8.5high
Jun 5, 2019🔧 No Patch
CVE-2018-2475
CVSS 8.5high
Oct 9, 2018🔧 No Patch
Monitor gardener in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.