PkgSeer

Vulnerabilities

Last updated 2 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
github.com/kyverno/kyverno Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach High Risk 7.7 6 months ago 4 hours ago
github.com/kyverno/kyverno Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno Unknown 3 months ago 4 hours ago
github.com/kyverno/kyverno Kyverno vulnerable due to usage of insecure cipher Medium Risk 6.0 3 years ago 4 hours ago
github.com/kyverno/kyverno Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno Unknown 2 years ago 4 hours ago
github.com/kyverno/kyverno Kyverno apiCall automatically forwards ServiceAccount token to external endpoints (credential leak) High Risk 7.7 6 months ago 19 days ago
github.com/kyverno/kyverno Kyverno apiCall automatically forwards ServiceAccount token to external endpoints (credential leak) in github.com/kyverno/kyverno Unknown 3 months ago 19 days ago
github.com/kyverno/kyverno Bypassing Kyverno Policies via Double Policy Exceptions Critical 9.0 9 months ago 19 days ago
github.com/kyverno/kyverno Kyverno has unrestricted outbound requests in Kyverno apiCall enabling SSRF High Risk 7.7 6 months ago 19 days ago
github.com/kyverno/kyverno Bypassing Kyverno Policies via Double Policy Exceptions in github.com/kyverno/kyverno Unknown 9 months ago 19 days ago
github.com/kyverno/kyverno Kyverno has unrestricted outbound requests in Kyverno apiCall enabling SSRF in github.com/kyverno/kyverno Unknown 3 months ago 19 days ago
github.com/kyverno/kyverno Kyverno vulnerable to SSRF via Service Calls High Risk 8.0 1 year ago 26 days ago
github.com/kyverno/kyverno Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno Unknown 1 year ago 26 days ago
github.com/kyverno/kyverno Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access High Risk 8.5 6 months ago 1 month ago
github.com/kyverno/kyverno kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token High Risk 8.1 6 months ago 1 month ago
github.com/kyverno/kyverno Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) High Risk 7.7 6 months ago 1 month ago
github.com/kyverno/kyverno Kyverno: ServiceAccount token leaked to external servers via apiCall service URL High Risk 8.1 6 months ago 1 month ago
github.com/kyverno/kyverno Kyverno Denial of Service via Context Variable Amplification in Policy Engine High Risk 7.7 8 months ago 1 month ago
github.com/kyverno/kyverno Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements High Risk 8.5 1 year ago 1 month ago
github.com/kyverno/kyverno Kyverno ignores subjectRegExp and IssuerRegExp Medium Risk 5.8 1 year ago 1 month ago
github.com/kyverno/kyverno Kyverno Controller Denial of Service via forEach Mutation Panic High Risk 7.7 5 months ago 1 month ago
github.com/kyverno/kyverno Kyverno Cross-Namespace Privilege Escalation via Policy apiCall Critical 9.9 8 months ago 1 month ago
github.com/kyverno/kyverno Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service High Risk 7.7 1 year ago 1 month ago
github.com/kyverno/kyverno Kyverno's PolicyException objects can be created in any namespace by default High Risk 7.5 1 year ago 1 month ago
github.com/kyverno/kyverno kyverno seccomp control can be circumvented Medium Risk 4.6 3 years ago 1 month ago
github.com/kyverno/kyverno Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system Critical 9.6 1 month ago 1 month ago
github.com/kyverno/kyverno Kyverno's NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system in github.com/kyverno/kyverno Unknown 1 month ago 1 month ago
github.com/kyverno/kyverno Attacker can cause Kyverno user to unintentionally consume insecure image High Risk 7.1 2 years ago 2 months ago
github.com/kyverno/kyverno Kyverno resource with a deletionTimestamp may allow policy circumvention Medium Risk 6.5 3 years ago 2 months ago
github.com/kyverno/kyverno Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno Unknown 2 years ago 2 months ago
github.com/kyverno/kyverno Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno Unknown 2 years ago 2 months ago
github.com/kyverno/kyverno kyverno verifyImages rule bypass possible with malicious proxy/registry High Risk 8.1 3 years ago 3 months ago
github.com/kyverno/kyverno Kyverno Controller Denial of Service via forEach Mutation Panic in github.com/kyverno/kyverno Unknown 3 months ago 3 months ago
github.com/kyverno/kyverno Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) in github.com/kyverno/kyverno Unknown 3 months ago 3 months ago
github.com/kyverno/kyverno Kyverno has SSRF via CEL http.Get/http.Post in NamespacedValidatingPolicy allows cross-namespace data access in github.com/kyverno/kyverno Unknown 3 months ago 3 months ago
github.com/kyverno/kyverno kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token in github.com/kyverno/kyverno Unknown 3 months ago 3 months ago
github.com/kyverno/kyverno Kyverno: ServiceAccount token leaked to external servers via apiCall service URL in github.com/kyverno/kyverno Unknown 3 months ago 3 months ago
github.com/kyverno/kyverno Denial of service from malicious manifest in kyverno in github.com/kyverno/kyverno Unknown 2 years ago 7 months ago
github.com/kyverno/kyverno Denial of service from malicious image manifest in kyverno in github.com/kyverno/kyverno Unknown 2 years ago 7 months ago
github.com/kyverno/kyverno Denial of service from malicious image manifest in kyverno in github.com/kyverno/kyverno Unknown 2 years ago 7 months ago
github.com/kyverno/kyverno kyverno seccomp control can be circumvented in github.com/kyverno/kyverno Unknown 2 years ago 7 months ago
github.com/kyverno/kyverno Denial of service from malicious signature in kyverno in github.com/kyverno/kyverno Unknown 2 years ago 7 months ago
github.com/kyverno/kyverno Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno Unknown 1 year ago 8 months ago
github.com/kyverno/kyverno Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements in github.com/kyverno/kyverno Unknown 1 year ago 8 months ago
github.com/kyverno/kyverno Kyverno ignores subjectRegExp and IssuerRegExp in github.com/kyverno/kyverno Unknown 1 year ago 8 months ago
github.com/kyverno/kyverno Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno Unknown 1 year ago 8 months ago
github.com/kyverno/kyverno Kyverno Denial of Service via Context Variable Amplification in Policy Engine in github.com/kyverno/kyverno Unknown 8 months ago 8 months ago
github.com/kyverno/kyverno Kyverno Cross-Namespace Privilege Escalation via Policy apiCall in github.com/kyverno/kyverno Unknown 8 months ago 8 months ago
github.com/kyverno/kyverno Verification rule bypass in github.com/kyverno/kyverno Unknown 3 years ago 1 year ago
Data courtesy of OSV.dev
Page 1