目標達成 すべての支援者に感謝 — 100%達成しました!

目標: 1000 CNY · 調達済み: 1336 CNY

100%

Kyverno 产品漏洞列表 / CVE 中文分析 19

Kyverno 产品相关 19 条漏洞,AI 中文标题与摘要、CVSS、POC 一站汇总。

Kyverno 是一款面向 Kubernetes 的开源策略引擎及策略管理工具。本页面聚合了该产品的安全漏洞信息,涵盖自首次披露以来的各类缺陷,包括配置错误、逻辑漏洞及潜在的服务拒绝风险等。读者可通过此页面追踪 Kyverno 官方发布的安全公告,深入了解其策略引擎在合规检查与运行时保护方面存在的具体弱点,并检索该产品的历史漏洞记录以评估安全风险及升级必要性。

ベンダー: kyverno

CVE IDタイトルCVSS深刻度公開日
CVE-2026-44245 Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component CWE-79 6.1 Medium2026-05-12
CVE-2026-41485 Kyverno Controller Denial of Service via forEach Mutation Panic CWE-617 7.7 High2026-04-24
CVE-2026-41323 Kyverno: ServiceAccount token leaked to external servers via apiCall service URL CWE-200 8.1 High2026-04-24
CVE-2026-41068 Kyverno: Cross-Namespace Read Bypasses RBAC Isolation (CVE-2026-22039 Incomplete Fix) CWE-863 7.7 High2026-04-24
CVE-2026-40868 kyverno apicall servicecall implicit bearer token injection leaks kyverno serviceaccount token CWE-922 8.1 High2026-04-21
CVE-2026-4789 CVE-2026-4789 9.8 -2026-03-30
CVE-2026-23881 Kyverno Denial of Service via Context Variable Amplification in Policy Engine CWE-770 7.7 High2026-01-27
CVE-2026-22039 Kyverno Cross-Namespace Privilege Escalation via Policy apiCall CWE-269 10.0 Critical2026-01-27
CVE-2025-47281 Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service CWE-20 7.7 High2025-07-23
CVE-2025-46342 Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements CWE-1287 8.6 High2025-04-30
CVE-2025-29778 Kyverno ignores subjectRegExp and IssuerRegExp CWE-285 5.8 Medium2025-03-24
CVE-2024-48921 Kyverno's PolicyException objects can be created in any namespace by default CWE-285 8.1AIHighAI2024-10-29
CVE-2023-47630 Attacker can cause Kyverno user to unintentionally consume insecure image CWE-345 7.1 High2023-11-14
CVE-2023-42813 Denial of service from malicious manifest in kyverno CWE-400 6.1 Medium2023-11-13
CVE-2023-42814 Denial of service from malicious image manifest in kyverno CWE-835 3.1 Low2023-11-13
CVE-2023-42815 Denial of service from malicious image manifest in kyverno CWE-835 3.1 Low2023-11-13
CVE-2023-42816 Denial of service from malicious signature in kyverno CWE-345 6.1 Medium2023-11-13
CVE-2023-34091 Kyverno resource with a deletionTimestamp may allow policy circumvention CWE-285 6.5 Medium2023-06-01
CVE-2023-33191 kyverno seccomp control can be circumvented CWE-284 4.6 Medium2023-05-30

Kyverno 产品累计公开 19 条 CVE 漏洞,本页提供按时间倒序的完整列表,包含 CVSS、CWE、AI 中文摘要与可获取的 POC 链接。