Kyverno 跨站脚本漏洞

Kyverno is an open-source strategy engine designed for Kubernetes by Kyverno developers. Versions of Kyverno prior to 2.5.2 contained a cross-site scripting vulnerability. This vulnerability stemmed from the use of the PropertyCard.vue component, which allowed for injection of raw HTML using the...

CVE-2026-44245: Improper Neutralization of Input During Web Page Generation

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses...