PkgSeer

Vulnerability GO-2026-5371

Unknown

3 months ago

Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno

v0.1.0 - v1.16.2-rc.1

Summary

Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno

Details

Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno

References

ADVISORY — github.com

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system in github.com/kyverno/kyverno

v1.18.0 - v1.18.2-rc.1 GO-2026-6296

Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system

v1.18.0 - v1.18.2-rc.1 GHSA-79gf-7frw-68m9

kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token in github.com/kyverno/kyverno

v0.1.0 - v1.17.0-rc.3 GO-2026-5575

Kyverno has unrestricted outbound requests in Kyverno apiCall enabling SSRF in github.com/kyverno/kyverno

v0.1.0 - v1.19.2-rc1 GO-2026-5594

Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access in github.com/kyverno/kyverno

v1.16.0 - v1.17.0-rc.3 GO-2026-5621

View all vulnerabilities for these packages

Impacted packages

github.com/kyverno/kyverno

Timeline

Published

3 months ago

Fixed (v1.16.2)

9 months ago

Last Modified

3 days ago