kyverno vulnerabilities (openSUSE)
16 vulnerabilities.
-
kyvernoopenSUSE HTTP/2 server crash due to HPACK encoder race in net/http 7.5 High -
kyvernoopenSUSE Reject malformed ECH outer extension references in crypto/tls 7.5 High -
kyvernoopenSUSE Double flow control refund on HTTP/2 server streams in net/http 9.1 Critical -
kyvernoopenSUSE Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http 7.5 High -
kyvernoopenSUSE Unauthenticated TLS 1.3 KeyUpdate record can cause persistent connection retention and DoS in crypto/tls 7.5 High -
kyvernoopenSUSE Unexpected work during chain building in crypto/x509 7.5 High -
kyvernoopenSUSE Go JOSE affect by a panic in JWE decryption 7.5 High -
kyvernoopenSUSE CVE-2026-4789 9.8 Critical -
kyvernoopenSUSE gRPC-Go has an authorization bypass via missing leading slash in :path 9.1 Critical -
kyvernoopenSUSE Incorrect calculation in CIRCL secp384r1 CombinedMult 2.9 Low -
kyvernoopenSUSE OpenTelemetry-Go Affected by Arbitrary Code Execution via PATH Hijacking 7.0 High -
kyvernoopenSUSE go-tuf Path Traversal in TAP 4 Multirepo Client Allows Arbitrary File Write via Malicious Repository Names 4.7 Medium -
kyvernoopenSUSE Unexpected session resumption in crypto/tls 10.0 Critical -
kyvernoopenSUSE Request smuggling due to acceptance of invalid chunked data in net/http 9.1 Critical -
kyvernoopenSUSE Stack exhaustion in Decoder.Decode in encoding/gob 7.5 High -
kyvernoopenSUSE Invoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna 9.6 Critical