kyverno vulnerabilities

CVEs per yearBy the year they were published

1. 20237
2. 20241
3. 20253
4. 202641

Newest CVEs

• CVE-2026-122323

  Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompression

  kyverno · kyverno

  High8.7
• CVE-2026-122322

  Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression

  kyverno · kyverno

  High8.7
• CVE-2026-122321

  Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypass

  kyverno · kyverno

  High8.5
• CVE-2026-122320

  Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clone

  kyverno · kyverno

  High8.3
• CVE-2026-122319

  Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panic

  kyverno · kyverno

  High8.7
• CVE-2026-122318

  Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificates

  kyverno · kyverno

  High7.2
• CVE-2026-122316

  Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExisting

  kyverno · kyverno

  High8.4
• CVE-2026-122315

  Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panic

  kyverno · kyverno

  High8.7
• CVE-2026-122314

  Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panic

  kyverno · kyverno

  High8.7
• CVE-2026-122313

  Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicy

  kyverno · kyverno

  Critical9.4