Skip to content
OpenAdvisories

Package · Go

github.com/kyverno/kyverno

26 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2023-54356

    Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites

    Kyverno versions 1.9.4 and earlier support insecure 3DES cipher suites (TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA and TLS_RSA_WITH_3DES_EDE_CBC_SHA) on their TLS endpoints. These 64-bit block ciphers are vulnerable to the Sweet32 attack (CVE-2016-2183), which, over…

    kyverno kyverno github.com/kyverno/kyverno Go
  • Low 3.1
    CVE-2023-42814

    Denial of service from malicious image manifest in kyverno

    Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerable component in Kyvernos Notary verifier. An attacker would need control over the registr…

    kyverno kyverno github.com/kyverno/kyverno Go
  • Low 3.1
    CVE-2023-42815

    Denial of service from malicious image manifest in kyverno

    Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerability was in Kyvernos Notary verifier. An attacker would need control over the registry f…

    kyverno kyverno github.com/kyverno/kyverno Go