agentprime: kyverno

agentprime: kyvernoEvery new CVE for kyverno.https://agentprime.io/CVE-2026-122323: Kyverno 1.11.0 before 1.19.2 Memory Exhaustion via Notary Signature Decompressionhttps://agentprime.io/advisories/CVE-2026-122323/https://agentprime.io/advisories/CVE-2026-122323/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:21 GMTCVECVE-2026-122322: Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompressionhttps://agentprime.io/advisories/CVE-2026-122322/https://agentprime.io/advisories/CVE-2026-122322/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:20 GMTCVECVE-2026-122321: Kyverno 1.18.0 before 1.19.2 verifyImages Cache Signature Verification Bypasshttps://agentprime.io/advisories/CVE-2026-122321/https://agentprime.io/advisories/CVE-2026-122321/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:20 GMTCVECVE-2026-122320: Kyverno before 1.19.2 Cross-Namespace Resource Read via generate.clonehttps://agentprime.io/advisories/CVE-2026-122320/https://agentprime.io/advisories/CVE-2026-122320/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:19 GMTCVECVE-2026-122319: Kyverno before 1.19.2 Denial of Service via In/NotIn Operator Panichttps://agentprime.io/advisories/CVE-2026-122319/https://agentprime.io/advisories/CVE-2026-122319/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:18 GMTCVECVE-2026-122318: Kyverno before 1.19.2 Cosign Identity Check Bypass via Empty SAN Certificateshttps://agentprime.io/advisories/CVE-2026-122318/https://agentprime.io/advisories/CVE-2026-122318/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:17 GMTCVECVE-2026-122316: Kyverno 1.17.0 before 1.19.2 Cross-Namespace Write via NamespacedMutatingPolicy mutateExistinghttps://agentprime.io/advisories/CVE-2026-122316/https://agentprime.io/advisories/CVE-2026-122316/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:17 GMTCVECVE-2026-122315: Kyverno before 1.19.2 Image Verification Bypass via Attestation Type Panichttps://agentprime.io/advisories/CVE-2026-122315/https://agentprime.io/advisories/CVE-2026-122315/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:16 GMTCVECVE-2026-122314: Kyverno before 1.19.2 Denial of Service via Shallow Variable Substitution Panichttps://agentprime.io/advisories/CVE-2026-122314/https://agentprime.io/advisories/CVE-2026-122314/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:15 GMTCVECVE-2026-122313: Kyverno 1.17.0 before 1.19.2 Cross-Namespace Privilege Escalation via NamespacedMutatingPolicyhttps://agentprime.io/advisories/CVE-2026-122313/https://agentprime.io/advisories/CVE-2026-122313/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:15 GMTCVEcriticalCVE-2026-122312: Kyverno 1.19.1 before 1.19.2 Namespace Isolation Bypass via APICall URLPath Query Stringhttps://agentprime.io/advisories/CVE-2026-122312/https://agentprime.io/advisories/CVE-2026-122312/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:14 GMTCVECVE-2026-122311: Kyverno 1.16.0 before 1.19.2 Path Traversal in Namespaced CEL Policies via resource argumenthttps://agentprime.io/advisories/CVE-2026-122311/https://agentprime.io/advisories/CVE-2026-122311/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:13 GMTCVEcriticalCVE-2026-122310: Kyverno 1.19.1 before 1.19.2 Privilege Escalation via Policy apiCall urlPathhttps://agentprime.io/advisories/CVE-2026-122310/https://agentprime.io/advisories/CVE-2026-122310/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:12 GMTCVEcriticalCVE-2026-122309: Kyverno before 1.19.2 Denial of Service via Unbounded CEL Policy Evaluation Costhttps://agentprime.io/advisories/CVE-2026-122309/https://agentprime.io/advisories/CVE-2026-122309/CVSS 8.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:12 GMTCVECVE-2026-122308: Kyverno before 1.19.2 Label Spoofing via Generation Handler processRequesthttps://agentprime.io/advisories/CVE-2026-122308/https://agentprime.io/advisories/CVE-2026-122308/CVSS 8.4 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:11 GMTCVECVE-2026-122307: Kyverno before 1.19.2 Policy Bypass via admissionpolicygenerator PolicyException Handlinghttps://agentprime.io/advisories/CVE-2026-122307/https://agentprime.io/advisories/CVE-2026-122307/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:10 GMTCVECVE-2026-122306: Kyverno before 1.19.2 Denial of Service via Exponential-Time Wildcard Matchinghttps://agentprime.io/advisories/CVE-2026-122306/https://agentprime.io/advisories/CVE-2026-122306/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:10 GMTCVECVE-2026-122305: Kyverno before 1.19.2 Denial of Service via Nested Variable Substitution Loophttps://agentprime.io/advisories/CVE-2026-122305/https://agentprime.io/advisories/CVE-2026-122305/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:09 GMTCVECVE-2026-122304: Kyverno 1.17.0 before 1.19.2 Privilege Escalation via CleanupPolicy Context Loaderhttps://agentprime.io/advisories/CVE-2026-122304/https://agentprime.io/advisories/CVE-2026-122304/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:08 GMTCVEcriticalCVE-2026-122303: Kyverno 1.17.0 before 1.19.2 Cross-Namespace Resource Overwrite via NamespacedMutatingPolicyhttps://agentprime.io/advisories/CVE-2026-122303/https://agentprime.io/advisories/CVE-2026-122303/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:08 GMTCVEcriticalCVE-2026-122302: Kyverno before 1.19.2 Privilege Escalation via Generate Rule Permission Checkhttps://agentprime.io/advisories/CVE-2026-122302/https://agentprime.io/advisories/CVE-2026-122302/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 05 Nov 2026 02:25:07 GMTCVEcriticalCVE-2026-100707: Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Pathhttps://agentprime.io/advisories/CVE-2026-100707/https://agentprime.io/advisories/CVE-2026-100707/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:01 GMTCVECVE-2026-100706: kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPathhttps://agentprime.io/advisories/CVE-2026-100706/https://agentprime.io/advisories/CVE-2026-100706/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:24:00 GMTCVEcriticalCVE-2026-100705: Kyverno before 1.19.1 SSRF via legacy apiCall service executorhttps://agentprime.io/advisories/CVE-2026-100705/https://agentprime.io/advisories/CVE-2026-100705/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:59 GMTCVECVE-2026-100704: Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypasshttps://agentprime.io/advisories/CVE-2026-100704/https://agentprime.io/advisories/CVE-2026-100704/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:59 GMTCVECVE-2026-100703: Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Libhttps://agentprime.io/advisories/CVE-2026-100703/https://agentprime.io/advisories/CVE-2026-100703/CVSS 8.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 13:23:58 GMTCVE