{"id":"GO-2025-4232","revision":"1086225b7c3948feab1246f28a68e7ce","records":[{"revision":"1086225b7c3948feab1246f28a68e7ce","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4232","aliases":["CVE-2025-67508","GHSA-fw33-qpx7-rhx2"],"title":"gardenctl is vulnerable to Command Injection when used with non‑POSIX shells in github.com/gardener/gardenctl-v2","description":"gardenctl is vulnerable to Command Injection when used with non‑POSIX shells in github.com/gardener/gardenctl-v2","state":0,"publishedAt":"2025-12-15T20:15:46+00:00","modifiedAt":"2026-03-03T04:57:48.199002+00:00","affected":[{"ecosystem":"Go","name":"github.com/gardener/gardenctl-v2","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"0.0.0-20251107111549-0bdc484cb5fb"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/gardener/gardenctl-v2/security/advisories/GHSA-fw33-qpx7-rhx2","https://nvd.nist.gov/vuln/detail/CVE-2025-67508"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4232","license":"OSV · upstream source license applies","key":"osv:GO-2025-4232","identifiers":["GO-2025-4232","CVE-2025-67508","GHSA-fw33-qpx7-rhx2"]},"retained":false,"historicalAffected":[]}],"coverage":[]}