tocsin

Go/github.com/gardener/gardener CVE-2025-47283: critical 9.9, EPSS 0.68%

Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

Action: Upgrade github.com/gardener/gardener to 1.116.4 or later.

go get github.com/gardener/gardener@v1.116.4
go get github.com/gardener/gardener@v1.117.5
go get github.com/gardener/gardener@v1.118.2

Affected

introducedfixedlast affected
01.116.4-
1.117.01.117.5-
1.118.01.118.2-

Fixed versions

1.116.41.117.51.118.2

Sources

CVE-2025-47283 · published · modified · JSON