Garden-io vulnerabilities
We track 2 vulnerabilities in Garden-io products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on October 9, 2023.
2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score
Latest Garden-io vulnerabilities
- 9.0 Critical severity
garden: Improper Control of Generation of Code
Garden provides automation for Kubernetes development and testing. Prior tov ersions 0.13.17 and 0.12.65, Garden has a dependency on the cryo library, which is vulnerable to code injection due to an insecure implementation of deserialization. Garden stores ser
- 9.8 Critical severity
garden: Missing Authentication for Critical Functionality
Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some operating modes this allows for an attacker to gain access to the application erroneously. The conf