Go/gardener/gardener CVE-2026-79767: medium 5.5, EPSS 0.39%
Gardener: Authorization Bypass via Group Subject Injection
Action: Upgrade gardener/gardener to 1.143.3 or later.
go get gardener/gardener@v1.143.3go get gardener/gardener@v1.144.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.143.0 | 1.143.3 | - |
| 1.144.0 | 1.144.2 | - |
Fixed versions
| 1.143.3 | 1.144.2 |
Sources
- osv: GHSA-gfjv-gqf2-c888#Go/gardener/gardener
- https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
- https://github.com/gardener/gardener/pull/15080
- https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
- https://github.com/gardener/gardener
- https://github.com/gardener/gardener/releases/tag/v1.144.2
CVE-2026-79767 · published · modified · JSON