Affected by GO-2025-3696 and 1 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

provider-local/

Details

Path	Synopsis
apis
local
local/helper
local/install
local/v1alpha1 Package v1alpha1 contains the local provider API resources.	Package v1alpha1 contains the local provider API resources.
local/validation
charts
controller
backupbucket
backupentry
backupoptions
controlplane
dnsrecord
extension/seed
extension/shoot
healthcheck
infrastructure
ingress
networkpolicy
operatingsystemconfig
service
worker
imagevector
local
webhook
controlplane
dnsconfig
machinecontrollermanager
networkpolicy
node
nodeagentosc
shoot