GO-2026-5577 Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui...

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Summary Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses v-html for the else branch of the URL check, meaning any non-URL string value flows...

GHSA-47M2-4CR7-MHCW vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui, q, teleport, frp, dkron, caddy, kargo, traefik, k3s, ipfs-cluster, k8sgateway, spegel, kubernetes-dns-node-cache, kubo...

CVE-2025-59530 vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter-ui-fips, ipfs-cluster, traefik-fips, caddy-fips, traefik, q, rke2-runtime, k8sgateway, teleport, kubo, ipfs-cluster-fips, kargo, caddy, dkron-fips, spegel-fips, frp, kubernetes-dns-node-cache-fips, coredns, dkron, syncthing, kubo-fips, spegel,...