CVE-2026-41485

>= 1.17.0 and < 1.17.2

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.17.2 and 1.16.4, an unchecked

7.7HIGH

CVE-2026-41323

>= 1.17.0 and < 1.17.2

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.18.0-rc1, 1.17.2-rc1, and 1.1

8.1HIGH

CVE-2026-41068

< 1.17.2

Kyverno is a policy engine designed for cloud native platform engineering teams. The patch for CVE-2026-22039 fixed cross-namespac

7.7HIGH

CVE-2026-40868

< 1.16.4

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 1.16.4, kyverno’s apiCall servicecall

8.1HIGH

CVE-2026-4789

>= 1.16.0 and <= 1.17.1

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

9.8CRITICAL

CVE-2026-23881

< 1.15.3

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have unbounde

7.7HIGH

CVE-2026-22039

< 1.15.3

Kyverno is a policy engine designed for cloud native platform engineering teams. Versions prior to 1.16.3 and 1.15.3 have a critic

9.9CRITICAL

CVE-2025-47281

< 1.14.2

Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service

7.7HIGH

CVE-2025-46342

<= 1.11.5

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to versions 1.13.5 and 1.14.0, it may happe

8.5HIGH

CVE-2025-29778

>= 1.13.0 and < 1.13.6

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to version 1.14.0-alpha.1, Kyverno ignores

5.8MEDIUM

CVE-2024-48921

< 1.13.0

Kyverno is a policy engine designed for Kubernetes. A kyverno ClusterPolicy, ie. "disallow-privileged-containers," can be overridd

2.7LOW

CVE-2023-47630

< 1.10.5

Kyverno is a policy engine designed for Kubernetes. An issue was found in Kyverno that allowed an attacker to control the digest o

7.1HIGH

CVE-2023-42816

all versions

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause de

6.1MEDIUM

CVE-2023-42815

all versions

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause de

3.1LOW

CVE-2023-42814

all versions

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause de

3.1LOW

CVE-2023-42813

all versions

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause de

6.1MEDIUM

CVE-2023-34091

< 1.10.0

Kyverno is a policy engine designed for Kubernetes. In versions of Kyverno prior to 1.10.0, resources which have the `deletionTime

6.5MEDIUM

CVE-2023-33191

>= 1.9.2 and < 1.9.4

Kyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validat

4.6MEDIUM

CVE-2022-47633

all versions

An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-m

8.1HIGH