Skip to content
OpenAdvisories

Package · Go

github.com/kyverno/policy-reporter-ui

1 known vulnerabilities.

1 result · Feed

  • Medium 6.1

    Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component

    Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that {{ }} interpolation pr…