Affected by GO-2025-3696 and 1 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

hack/

Details

Path	Synopsis
local-development
common This package imports things required by build scripts, to force `go mod` to see them as dependencies	This package imports things required by build scripts, to force `go mod` to see them as dependencies
local-garden command
tools
gomegacheck module
logcheck module