BIT-KYVERNO-2026-100703 Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib

Kyverno 1.16.0 through 1.19.0 registers the globalcontext.Lib CEL library in its policy environment without confining it to the policy's namespace, unlike the sibling libraries resource.Lib, http.Lib, configMap loader which are handed the policy namespace. A tenant who can create a namespaced...

Uncontrolled Recursion

org.apache.neethi, neethi is vulnerable to uncontrolled recursion. The vulnerability is due to uncontrolled recursive policy parsing, which allows an attacker to provide a maliciously crafted deeply nested or ID-less policy that causes excessive runtime memory consumption and potentially crashes...

CLEANSTART-2024-ML93442 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89

Security vulnerability affects the chromium package. Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89...

CLEANSTART-2024-LC25176 Insufficient policy enforcement in appcache in Google Chrome prior to 89

Security vulnerability affects the chromium package. Insufficient policy enforcement in appcache in Google Chrome prior to 89...

CLEANSTART-2024-UW64833 Insufficient policy enforcement in content security policy in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in content security policy in Google Chrome prior to 91...

CLEANSTART-2024-AK74596 Insufficient policy enforcement in content security policy in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in content security policy in Google Chrome prior to 91...

CLEANSTART-2024-JA96545 Insufficient policy enforcement in cookies in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in cookies in Google Chrome prior to 91...

CLEANSTART-2024-TA01955 Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in iFrameSandbox in Google Chrome prior to 91...

CLEANSTART-2024-DN70918 Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in PopupBlocker in Google Chrome prior to 91...

CLEANSTART-2024-IZ73327 Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91...

CLEANSTART-2024-MU24311 Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91

Security vulnerability affects the chromium package. Insufficient policy enforcement in Content Security Policy in Google Chrome prior to 91...

CLEANSTART-2024-XF14437 Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to 92

Security vulnerability affects the chromium package. Insufficient policy enforcement in image handling in iOS in Google Chrome on iOS prior to 92...

CLEANSTART-2024-GV44456 Insufficient policy enforcement in Android intents in Google Chrome prior to 92

Security vulnerability affects the chromium package. Insufficient policy enforcement in Android intents in Google Chrome prior to 92...

CLEANSTART-2024-LU48204 Insufficient policy enforcement in Installer in Google Chrome prior to 92

Security vulnerability affects the chromium package. Insufficient policy enforcement in Installer in Google Chrome prior to 92...

CLEANSTART-2024-OP03397 Insufficient policy enforcement in DevTools in Google Chrome prior to 92

Security vulnerability affects the chromium package. Insufficient policy enforcement in DevTools in Google Chrome prior to 92...

CLEANSTART-2024-YI46744 Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink

Security vulnerability affects the chromium package. Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink...

CLEANSTART-2024-HB07332 Chromium: CVE-2021-30617 Policy bypass in Blink

Security vulnerability affects the chromium package. Chromium: CVE-2021-30617 Policy bypass in Blink...

CLEANSTART-2024-JC18664 Policy bypass in COOP in Google Chrome prior to 98

Security vulnerability affects the chromium package. Policy bypass in COOP in Google Chrome prior to 98...

CLEANSTART-2024-JO49927 Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102

Security vulnerability affects the chromium package. Insufficient policy enforcement in Safe Browsing in Google Chrome on Mac prior to 102...

CLEANSTART-2024-AQ78827 Insufficient policy enforcement in COOP in Google Chrome prior to 102

Security vulnerability affects the chromium package. Insufficient policy enforcement in COOP in Google Chrome prior to 102...