kyverno
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 14 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from December 21, 2022 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system
Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component
Kyverno Controller Denial of Service via forEach Mutation Panic
Kyverno: ServiceAccount token leaked to external servers via apiCall service URL
Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix)
kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token
Kyverno Denial of Service via Context Variable Amplification in Policy Engine
Kyverno Cross-Namespace Privilege Escalation via Policy apiCall
Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service
Monitor kyverno in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.