Affected by GO-2025-3696 and 1 other vulnerabilities

GO-2025-3696: Gardener allows bypassing project secret validation which can lead to privilege escalation in github.com/gardener/gardener

GO-2025-3698: Gardener allows metadata injection for a project secret which can lead to privilege escalation in github.com/gardener/gardener

observability/

Details

Path	Synopsis
logging
eventlogger
fluentbit
fluentcustomresources
fluentoperator
fluentoperator/assets
vali
vali/constants
vali/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
monitoring
alertmanager
alertmanager/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
blackboxexporter
blackboxexporter/garden
blackboxexporter/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
blackboxexporter/shoot/cluster
blackboxexporter/shoot/controlplane
gardenermetricsexporter
kubestatemetrics
kubestatemetrics/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
metricsserver
nodeexporter
nodeexporter/mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.
prometheus
prometheus/aggregate
prometheus/aggregate/assets/prometheusrules
prometheus/cache
prometheus/garden
prometheus/longterm
prometheus/seed
prometheus/shoot
prometheusoperator
prometheusoperator/templates
utils
plutono
mock Package mock is a generated GoMock package.	Package mock is a generated GoMock package.