[ Vendor · 5 CVEs ]
kyverno
CVEs affecting kyverno published in the last 30 days, plus any kyverno CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-100703 | 26 Sep 2026 | CVSS 7.7 | kyvernoKyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace… | |
| CVE-2026-100704 | 26 Sep 2026 | CVSS 7.7 | kyvernoKyverno is a policy engine for Kubernetes. In versions 1.14.0 through 1.19.0, the ImageValidatingPolicy (policies.kyverno.io/v1beta1) evaluator never… | |
| CVE-2026-100705 | 26 Sep 2026 | CVSS 7.6 | kyvernoKyverno before 1.19.1 is vulnerable to server-side request forgery. The default egress blocklist (169.254.169.254, 169.254.169.253… | |
| CVE-2026-100706 | 26 Sep 2026 | CVSS 9.9 | kyvernokyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tenants to bypass the… | |
| CVE-2026-100707 | 26 Sep 2026 | CVSS 7.7 | kyvernoKyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due to inconsistent path… |