Vulnerability GO-2026-5337
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
3 months ago
June 25, 2026 at 06:43 PM UTC
Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) in github.com/kyverno/kyverno
v0.1.0 - v1.19.1
v0.1.0 - v1.19.1
Summary
Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) in github.com/kyverno/kyverno
Details
Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) in github.com/kyverno/kyverno
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
1 month ago
Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system in github.com/kyverno/kyverno
v1.18.0 - v1.18.2-rc.1 GO-2026-6296
v1.18.0 - v1.18.2-rc.1 GO-2026-6296
Critical
1 month ago
Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system
v1.18.0 - v1.18.2-rc.1 GHSA-79gf-7frw-68m9
v1.18.0 - v1.18.2-rc.1 GHSA-79gf-7frw-68m9
Unknown
3 months ago
kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token in github.com/kyverno/kyverno
v0.1.0 - v1.17.0-rc.3 GO-2026-5575
v0.1.0 - v1.17.0-rc.3 GO-2026-5575
Unknown
3 months ago
Kyverno has unrestricted outbound requests in Kyverno apiCall enabling SSRF in github.com/kyverno/kyverno
v0.1.0 - v1.19.1 GO-2026-5594
v0.1.0 - v1.19.1 GO-2026-5594
Unknown
3 months ago
Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access in github.com/kyverno/kyverno
v1.16.0 - v1.17.0-rc.3 GO-2026-5621
v1.16.0 - v1.17.0-rc.3 GO-2026-5621
Impacted packages
Timeline
Published
3 months ago
June 25, 2026 at 06:43 PM UTC
Last Modified
3 months ago
June 26, 2026 at 03:44 PM UTC