kyverno kyverno

Name: kyverno kyverno
Brand: kyverno

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

1critical4high6medium1low

updated 2026-10-27

vulnerabilities (19)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2025-46342US	high8.2	0.75% (55th)	—	1.14.0	2025-04-30	2 versions
CVE-2026-4789US	—	0.71% (53rd)	—	no fix	2026-03-30	≤ 1.16.0
CVE-2023-42815US	medium5.3	0.67% (52nd)	—	fec2992e3f9fcd6b9c62267522c09b182e7df73b	2023-11-13	80d139bb5d1d9d7e907abe851b97dc73821a5be2, → fec2992e3f9fcd6b9c62267522c09b182e7df73b
CVE-2023-42814US	medium5.3	0.67% (52nd)	—	fec2992e3f9fcd6b9c62267522c09b182e7df73b	2023-11-13	80d139bb5d1d9d7e907abe851b97dc73821a5be2, → fec2992e3f9fcd6b9c62267522c09b182e7df73b
CVE-2023-42813US	medium5.3	0.66% (51st)	—	fec2992e3f9fcd6b9c62267522c09b182e7df73b	2023-11-13	80d139bb5d1d9d7e907abe851b97dc73821a5be2, → fec2992e3f9fcd6b9c62267522c09b182e7df73b
CVE-2026-23881US	medium6.5	0.62% (49th)	—	1.16.3	2026-01-27	2 versions
CVE-2026-22039US	—	0.58% (47th)	—	1.16.3	2026-01-27	2 versions
CVE-2024-48921US	low2.7OT elevated	0.57% (47th)	—	no fix	2024-10-29	≤ < 1.13.0
CVE-2026-41323US	critical9.1	0.56% (46th)	—	1.17.2-rc1	2026-04-24	2 versions
CVE-2025-47281US	—	0.56% (46th)	—	no fix	2025-07-23	≤ < 1.14.2
CVE-2023-34091US	medium6.5	0.50% (42nd)	—	no fix	2023-06-01	≤ < 1.10.0
CVE-2023-33191US	high8.8	0.48% (42nd)	—	1.9.4	2023-05-30	1.9.2, → 1.9.4
CVE-2023-42816US	medium5.3OT elevated	0.46% (39th)	—	fec2992e3f9fcd6b9c62267522c09b182e7df73b	2023-11-13	80d139bb5d1d9d7e907abe851b97dc73821a5be2, → fec2992e3f9fcd6b9c62267522c09b182e7df73b
CVE-2026-41485US	—	0.37% (31st)	—	1.17.2	2026-04-24	2 versions
CVE-2025-29778US	high8.0	0.34% (28th)	—	no fix	2025-03-24	≤ < 1.14.0-alpha.1
CVE-2026-40868US	—	0.29% (21st)	—	no fix	2026-04-21	≤ < 1.16.4
CVE-2026-41068US	—OT elevated	0.27% (19th)	—	no fix	2026-04-24	≤ < 1.17.2
CVE-2023-47630US	high7.1OT elevated	0.26% (18th)	—	no fix	2023-11-14	≤ < 1.10.5
CVE-2026-44245US	—	0.18% (8th)	—	no fix	2026-05-12	≤ < 2.5.2

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-285Improper Authorization3 CVEs
CWE-918Server-Side Request Forgery (SSRF)3 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-1287Improper Validation of Specified Type of Input1 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)19 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan