kyverno — Vulnerabilities & Security Advisories 31

Kyverno serves as a policy engine for Kubernetes, enforcing security and compliance through declarative policies. Historically, vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and insecure default configurations. The project maintains active development with regular security updates, though past incidents have exposed flaws in policy enforcement mechanisms and webhook validation. With 18 CVEs recorded, the project demonstrates typical risks associated with complex policy management systems, requiring careful implementation and ongoing monitoring to prevent potential bypasses of security controls in containerized environments.