kyverno

Top products

The 15 most recently published vulnerabilities affecting kyverno.

• CVE-2026-84200Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions9.0Sep 1, 2026
• CVE-2026-84199Kyverno before 1.16.2 SSRF via APICall Feature7.7Sep 1, 2026
• CVE-2026-84196Kyverno before 1.18.0 Server-Side Request Forgery via apiCall7.7Sep 1, 2026
• CVE-2026-84195Kyverno before 1.16.4 Credential Leak via apiCall7.7Sep 1, 2026
• CVE-2025-15613Kyverno before v1.13.4 SSRF via Service Call6.5Sep 1, 2026
• CVE-2023-54356Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites3.7Sep 1, 2026
• CVE-2026-54523Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system9.6Aug 26, 2026
• CVE-2026-44245Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component6.1May 12, 2026
• CVE-2026-41485Kyverno Controller Denial of Service via forEach Mutation Panic7.7Apr 24, 2026
• CVE-2026-41323Kyverno: ServiceAccount token leaked to external servers via apiCall service URL8.1Apr 24, 2026
• CVE-2026-41068Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix)7.7Apr 24, 2026
• CVE-2026-40868kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token8.1Apr 21, 2026
• CVE-2026-4789CVE-2026-47899.8Mar 30, 2026
• CVE-2026-23881Kyverno Denial of Service via Context Variable Amplification in Policy Engine7.7Jan 27, 2026
• CVE-2026-22039Kyverno Cross-Namespace Privilege Escalation via Policy apiCall9.9Jan 27, 2026