tocsin

CVE-2026-79767

3 advisories.

Go/github.com/gardener/gardener CVE-2026-79767: medium 5.5, EPSS 0.39%

Gardener: Authorization Bypass via Group Subject Injection

Action: Upgrade github.com/gardener/gardener to 1.142.6 or later.

go get github.com/gardener/gardener@v1.142.6

Affected

introducedfixedlast affected
01.142.6-

Fixed versions

1.142.6

Sources

CVE-2026-79767 · published · modified · JSON

Go/gardener/gardener CVE-2026-79767: medium 5.5, EPSS 0.39%

Gardener: Authorization Bypass via Group Subject Injection

Action: Upgrade gardener/gardener to 1.143.3 or later.

go get gardener/gardener@v1.143.3
go get gardener/gardener@v1.144.2

Affected

introducedfixedlast affected
1.143.01.143.3-
1.144.01.144.2-

Fixed versions

1.143.31.144.2

Sources

CVE-2026-79767 · published · modified · JSON

Go/github.com/gardener/gardener CVE-2026-79767: unknown, EPSS 0.39%

Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

Action: Upgrade github.com/gardener/gardener to 1.142.6 or later.

go get github.com/gardener/gardener@v1.142.6

Affected

introducedfixedlast affected
0--
01.142.6-

Fixed versions

1.142.6

Sources

CVE-2026-79767 · published · modified · JSON