kyverno vulnerabilities (Bitnami)
26 vulnerabilities.
-
kyvernoBitnami Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path 8.3 High -
kyvernoBitnami kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath 9.4 Critical -
kyvernoBitnami Kyverno before 1.19.1 SSRF via legacy apiCall service executor 8.3 High -
kyvernoBitnami Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass 8.3 High -
kyvernoBitnami Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib 8.3 High -
kyvernoBitnami Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system 9.6 Critical -
kyvernoBitnami Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component 6.1 Medium -
kyvernoBitnami Kyverno Controller Denial of Service via forEach Mutation Panic 7.7 High -
kyvernoBitnami Kyverno before 1.16.4 Credential Leak via apiCall 8.3 High -
kyvernoBitnami Kyverno: ServiceAccount token leaked to external servers via apiCall service URL 8.1 High -
kyvernoBitnami Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) 7.7 High -
kyvernoBitnami kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token 8.1 High -
kyvernoBitnami Kyverno before 1.16.2 SSRF via APICall Feature 6.9 Medium -
kyvernoBitnami Kyverno before 1.18.0 Server-Side Request Forgery via apiCall 8.3 High -
kyvernoBitnami CVE-2026-4789 9.8 Critical -
kyvernoBitnami Kyverno Denial of Service via Context Variable Amplification in Policy Engine 7.7 High -
kyvernoBitnami Kyverno Cross-Namespace Privilege Escalation via Policy apiCall 10.0 Critical -
kyvernoBitnami Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions 9.4 Critical -
kyvernoBitnami Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service 7.7 High -
kyvernoBitnami Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements 8.6 High -
kyvernoBitnami Kyverno before v1.13.4 SSRF via Service Call 6.9 Medium -
kyvernoBitnami Kyverno ignores subjectRegExp and IssuerRegExp 5.8 Medium -
kyvernoBitnami Kyverno's PolicyException objects can be created in any namespace by default 8.7 High -
kyvernoBitnami Attacker can cause Kyverno user to unintentionally consume insecure image 7.1 High -
kyvernoBitnami Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites 9.3 Critical -
kyvernoBitnami kyverno verifyImages rule bypass possible with malicious proxy/registry 8.1 High