CLEANSTART-2026-RB15576 Security fixes in kyverno-policy-reporter-fips 3.7.3-r1

Package kyverno-policy-reporter-fips version 3.7.3-r1 fixes 3 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-39883...

CLEANSTART-2026-JI51120 Security fixes in kyverno-fips 1.16.3-r5

Package kyverno-fips version 1.16.3-r5 fixes 1 vulnerabilities: CVE-2026-34986...

CLEANSTART-2026-CL42205 Security fixes in kyverno-fips 1.13.6-r9

Package kyverno-fips version 1.13.6-r9 fixes 22 vulnerabilities: CVE-2025-68121, CVE-2025-61726, CVE-2025-61728, CVE-2026-25679, CVE-2025-61730...

CLEANSTART-2026-RU30186 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r6

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r6 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-WA03770 Security fixes in kyverno-policy-reporter-fips 3.3.3-r4

Package kyverno-policy-reporter-fips version 3.3.3-r4 fixes 5 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-ZF69342 Security fixes in kyverno-fips 1.16.3-r6

Package kyverno-fips version 1.16.3-r6 fixes 10 vulnerabilities: CVE-2026-39883, ghsa-hfvc-g4fc-pqhx, CVE-2026-32280, CVE-2026-32289, CVE-2026-32282...

CLEANSTART-2026-CJ46936 Security fixes in kyverno-policy-reporter-fips 3.7.2-r0

Package kyverno-policy-reporter-fips version 3.7.2-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-BA80023 Security fixes in kyverno-policy-reporter-fips 3.3.3-r3

Package kyverno-policy-reporter-fips version 3.3.3-r3 fixes 4 vulnerabilities: CVE-2026-26958, CVE-2026-24051, ghsa-fw7p-63qq-7hpr, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-HI11679 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r8

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r8 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32282, CVE-2026-32281, CVE-2026-32288, CVE-2026-32289...

CLEANSTART-2026-JU25374 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r9

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r9 fixes 11 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820...

CLEANSTART-2026-GW85948 Security fixes in kyverno 1.18.1-r0

Package kyverno version 1.18.1-r0 fixes 4 vulnerabilities: CVE-2026-39821, CVE-2026-25680, CVE-2026-42504, CVE-2026-42507...

CLEANSTART-2026-ZH32905 Security fixes in kyverno-fips 1.17.1-r2

Package kyverno-fips version 1.17.1-r2 fixes 2 vulnerabilities: CVE-2025-15558, ghsa-p436-gjf2-799p...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: kyverno, kine, telegraf, aactl, zitadel, prometheus-operator, k3s, snyk-cli, loki, k3d, cert-manager, zot, flux, kots, prometheus-mongodb-exporter, spire-server, elastic-agent-fips, prometheus, kaf, containerd, terraform, reports-server, nerdctl, cilium,...

GHSA-259R-337F-4RFW vulnerabilities

Vulnerabilities for packages: spire-server, k3s, minio, k3d, kaf, prometheus-operator, flux, containerd, kyverno, aactl, kine, loki, telegraf, snyk-cli, zot, kots, nerdctl...

CLEANSTART-2026-CP15003 Security fixes for CVE-2026-25680, CVE-2026-39821, CVE-2026-42504, CVE-2026-42507, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-48702, CVE-2026-49478, CVE-2026-49835, ghsa-389r-gv7p-r3rp, ghsa-crhj-59gh-8x96, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-qw64-3x98-g7q2, ghsa-w5pp-99ch-qj29 applied in versions: 1.18.1-r0, 1.18.1-r2

Multiple security vulnerabilities affect the kyverno package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-60917

Name of the Vulnerable Software and Affected Versions Kyverno versions prior to 1.18.2 Description A privilege escalation issue allows a tenant to gain administrative privileges across any namespace, including the kube-system namespace. Recommendations Update to version 1.18.2...

CLEANSTART-2026-KE34410 Security fixes for CVE-2026-25680, CVE-2026-39821, CVE-2026-42504, CVE-2026-42507 applied in versions: 1.18.1-r0

Multiple security vulnerabilities affect the kyverno package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: kyverno, trivy-operator, zarf, aactl, tekton-chains, gitsign, teleport-operator-fips, kyverno-notation-aws, trivy-fips, kyverno-notation-aws-fips, crossplane-fips, crossplane, trivy-operator-fips, tflint, tbot, kyverno-fips, ratify, zarf-fips,...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kyverno, trivy-operator, zarf, aactl, tekton-chains, gitsign, teleport-operator-fips, kyverno-notation-aws, trivy-fips, kyverno-notation-aws-fips, crossplane-fips, crossplane, trivy-operator-fips, tflint, tbot, kyverno-fips, ratify, zarf-fips,...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kyverno, telegraf, vault-secrets-operator, envoy-gateway-fips, azure-aad-pod-identity-mic, prometheus-operator-fips, vexctl, grafana-alloy-fips, glab, kube-state-metrics, grafana-operator, ocm-cli, pulumi-language-dotnet, rke2-runtime-fips, commercial-spilo, snyk-cli...