Vulnerabilities in Kyverno
52 resultsCVE-2026-122307HIGHKyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException HandlingEPSS 0.2%CVE-2026-122308HIGHKyverno before 1.19.2 Label Spoofing via Generation Handler processRequestEPSS 0.2%CVE-2026-122321HIGHKyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification BypassEPSS 0.2%CVE-2026-100703HIGHKyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.LibEPSS 0.2%CVE-2026-100704HIGHKyverno before 1.19.1 ImageValidatingPolicy Exception BypassEPSS 0.2%CVE-2026-122320HIGHKyverno before 1.19.2 Cross-Namespace Resource Read via generate.cloneEPSS 0.2%CVE-2023-54356CRITICALKyverno before 1.9.5 Sweet32 Medium Strength Cipher SuitesEPSS 0.2%CVE-2026-100705HIGHKyverno before 1.19.1 SSRF via legacy apiCall service executorEPSS 0.2%CVE-2026-122309HIGHKyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation CostEPSS 0.2%CVE-2026-44245MEDIUMKyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard ComponentEPSS 0.2%CVE-2026-122318HIGHKyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN CertificatesEPSS 0.2%CVE-2026-122316HIGHKyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExistingEPSS 0.2%