Go github.com/kyverno/kyverno

Name: Go github.com/kyverno/kyverno
Brand: Go

productUS

pkg:golang/github.com/kyverno/kyverno

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

by severity

2critical7high6medium2low

updated 2026-10-28

vulnerabilities (26)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2022-47633US	high8.1	1.05% (64th)	—	1.8.5	2022-12-23	1.8.3 → 1.8.5
CVE-2025-46342US	high8.2	0.75% (55th)	—	1.13.5	2025-04-30	2 versions
CVE-2026-4789US	—	0.71% (53rd)	—	1.17.0	2026-03-30	1.16.0 → 1.17.0
CVE-2023-42815US	medium5.3	0.67% (52nd)	—	1.5.0-rc1.0.20230918070231-fec2992e3f9f	2023-11-13	1.5.0-rc1.0.20230601080528-80d139bb5d1d → 1.5.0-rc1.0.20230918070231-fec2992e3f9f
CVE-2023-42814US	medium5.3	0.67% (52nd)	—	1.5.0-rc1.0.20230918070231-fec2992e3f9f	2023-11-13	1.5.0-rc1.0.20230601080528-80d139bb5d1d → 1.5.0-rc1.0.20230918070231-fec2992e3f9f
CVE-2023-42813US	medium5.3	0.66% (51st)	—	1.5.0-rc1.0.20230918070231-fec2992e3f9f	2023-11-13	1.5.0-rc1.0.20230601080528-80d139bb5d1d → 1.5.0-rc1.0.20230918070231-fec2992e3f9f
CVE-2026-23881US	medium6.5	0.62% (49th)	—	1.15.3	2026-01-27	2 versions
CVE-2026-22039US	—	0.58% (47th)	—	1.15.3	2026-01-27	2 versions
CVE-2024-48921US	low2.7OT elevated	0.57% (47th)	—	1.13.0	2024-10-29	< 1.13.0
CVE-2026-41323US	critical9.1	0.56% (46th)	—	1.17.0	2026-04-24	< 1.17.0
CVE-2025-47281US	—	0.56% (46th)	—	1.14.2	2025-07-23	< 1.14.2
CVE-2023-34091US	medium6.5	0.50% (42nd)	—	1.10.0	2023-06-01	< 1.10.0
CVE-2023-33191US	high8.8	0.48% (42nd)	—	1.9.4	2023-05-30	1.9.2 → 1.9.4
CVE-2026-54523US	—OT elevated	0.47% (40th)	—	1.18.2	2026-08-26	1.18.0 → 1.18.2
CVE-2023-42816US	medium5.3OT elevated	0.46% (40th)	—	1.5.0-rc1.0.20230918070231-fec2992e3f9f	2023-11-13	1.5.0-rc1.0.20230601080528-80d139bb5d1d → 1.5.0-rc1.0.20230918070231-fec2992e3f9f
CVE-2026-84195US	—	0.39% (33rd)	—	1.17.0	2026-09-01	< 1.17.0
CVE-2026-41485US	—	0.37% (31st)	—	1.17.2	2026-04-24	2 versions
CVE-2026-84199US	high7.7	0.36% (29th)	—	1.16.2	2026-09-01	< 1.16.2
CVE-2025-15613US	—	0.36% (29th)	—	no fix	2026-09-01	2 versions
CVE-2026-84196US	high7.7	0.35% (29th)	—	no fix	2026-09-01	2 versions
CVE-2025-29778US	high8.0	0.34% (28th)	—	1.14.0-alpha.1	2025-03-24	2 versions
CVE-2026-40868US	—	0.29% (21st)	—	1.17.0	2026-04-21	< 1.17.0
CVE-2026-84200US	critical9.0	0.27% (20th)	—	1.13.0	2026-09-01	1.9.0 → 1.13.0
CVE-2026-41068US	—OT elevated	0.27% (19th)	—	no fix	2026-04-24	2 versions
CVE-2023-47630US	high7.1OT elevated	0.26% (18th)	—	1.10.5	2023-11-14	< 1.10.5
CVE-2023-54356US	low3.7	0.20% (10th)	—	1.9.5	2026-09-01	< 1.9.5

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-918Server-Side Request Forgery (SSRF)6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-285Improper Authorization3 CVEs
CWE-284Improper Access Control2 CVEs
CWE-345Insufficient Verification of Data Authenticity2 CVEs
CWE-835Loop with Unreachable Exit Condition ('Infinite Loop')2 CVEs
CWE-863Incorrect Authorization2 CVEs
CWE-1287Improper Validation of Specified Type of Input1 CVEs

sources (1)

Which sources assert this record, and when.

USOSV.dev26 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan