GO-2025-4232
NoneCVSS
—
EPSS
—
Published
Dec 15, 2025
CISA due date
—
The record
gardenctl is vulnerable to Command Injection when used with non‑POSIX shells in github.com/gardener/gardenctl-v2
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/gardener/gardenctl-v2 | 0 | 0.0.0-20251107111549-0bdc484cb5fb |