Affected by GO-2025-3696 and 3 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

GO-2026-6568: Gardener: Authorization Bypass via Group Subject Injection in gardener/gardener

validator

package

v1.45.1 Latest Latest Go to latest Published: May 4, 2022 License: Apache-2.0, BSD-2-Clause, MIT, + 1 more Imports: 9 Imported by: 0

Details

View Source

const (
	// PluginName is the name of this admission plugin.
	PluginName = "ProjectValidator"
)

This section is empty.

func New() (*handler, error)

New creates a new handler admission plugin.

func Register(plugins *admission.Plugins)

Register registers a plugin.

This section is empty.