Go/github.com/gardener/gardener CVE-2026-79767: unknown, EPSS 0.39%
Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener
Action: Upgrade github.com/gardener/gardener to 1.142.6 or later.
go get github.com/gardener/gardener@v1.142.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
| 0 | 1.142.6 | - |
Fixed versions
| 1.142.6 |
Sources
- osv: GO-2026-6568
- https://github.com/gardener/gardener/security/advisories/GHSA-gfjv-gqf2-c888
- https://github.com/gardener/gardener/commit/63751db97dca6cc5ee5f966d4963415de6ae5545
- https://github.com/gardener/gardener/pull/15080
- https://github.com/gardener/gardener/releases/tag/v1.144.2
CVE-2026-79767 · published · modified · JSON