kyverno
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 23 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 21, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path
kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath
Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass
Kyverno before 1.19.1 SSRF via legacy apiCall service executor
Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib
Kyverno before v1.13.0 Policy Bypass via Multiple Exceptions
Kyverno before 1.16.2 SSRF via APICall Feature
Kyverno before 1.18.0 Server-Side Request Forgery via apiCall
Kyverno before v1.13.4 SSRF via Service Call
Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system
Monitor kyverno in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.