garden vulnerabilities

2 known vulnerabilities in garden from Garden-io. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  garden: Improper Control of Generation of Code

  CVE-2023-44392Oct 9, 2023Garden-io

  Garden provides automation for Kubernetes development and testing. Prior tov ersions 0.13.17 and 0.12.65, Garden has a dependency on the cryo library, which is vulnerable to code injection due to an insecure implementation of deserialization. Garden stores ser

• 9.8 Critical severity

  garden: Missing Authentication for Critical Functionality

  CVE-2022-24829Apr 11, 2022Garden-ioEPSS 1.35%

  Garden is an automation platform for Kubernetes development and testing. In versions prior to 0.12.39 multiple endpoints did not require authentication. In some operating modes this allows for an attacker to gain access to the application erroneously. The conf