CRITICAL9.9Go
GHSA-227x-7mh8-3cf6· CVE-2025-59823, GO-2025-3981Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning
Modified: 10/23/2025
package
Go/github.com/gardener/gardener-extension-provider-gcp
pkg:go/github.com/gardener/gardener-extension-provider-gcp
—Go
GO-2025-3981· CVE-2025-59823, GHSA-227x-7mh8-3cf6Gardener provider extensions vulnerable to code injection when Terraform is used for infrastructure provisioning in github.com/gardener/gardener-extension-provider-aws
Modified: 3/3/2026