CLEANSTART-2026-RU30186 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r6

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r6 fixes 5 vulnerabilities: CVE-2026-27139, CVE-2026-27142, CVE-2026-25679, CVE-2026-33186, ghsa-p77j-4mvh-x3m3...

CLEANSTART-2026-WA03770 Security fixes in kyverno-policy-reporter-fips 3.3.3-r4

Package kyverno-policy-reporter-fips version 3.3.3-r4 fixes 5 vulnerabilities: CVE-2026-25679, ghsa-p77j-4mvh-x3m3, CVE-2026-33186, CVE-2026-27139, CVE-2026-27142...

CLEANSTART-2026-RB15576 Security fixes in kyverno-policy-reporter-fips 3.7.3-r1

Package kyverno-policy-reporter-fips version 3.7.3-r1 fixes 3 vulnerabilities: ghsa-xmrv-pmrh-hhx2, CVE-2026-34986, CVE-2026-39883...

CLEANSTART-2026-HI11679 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r8

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r8 fixes 7 vulnerabilities: CVE-2026-32280, CVE-2026-32282, CVE-2026-32281, CVE-2026-32288, CVE-2026-32289...

CLEANSTART-2026-CJ46936 Security fixes in kyverno-policy-reporter-fips 3.7.2-r0

Package kyverno-policy-reporter-fips version 3.7.2-r0 fixes 2 vulnerabilities: CVE-2026-26958, ghsa-fw7p-63qq-7hpr...

CLEANSTART-2026-BA80023 Security fixes in kyverno-policy-reporter-fips 3.3.3-r3

Package kyverno-policy-reporter-fips version 3.3.3-r3 fixes 4 vulnerabilities: CVE-2026-26958, CVE-2026-24051, ghsa-fw7p-63qq-7hpr, ghsa-9h8m-3fm2-qjrq...

CLEANSTART-2026-JU25374 Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.4.2-r9

Package kyverno-policy-reporter-kyverno-plugin-fips version 1.4.2-r9 fixes 11 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820...

CLEANSTART-2026-CP05946 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r5

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-LG10684 Security fixes for CVE-2026-42504 applied in versions: 1.6.4-r0

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin package. This issue is resolved in later releases. See references for vulnerability details...

GO-2026-5577 Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component in github.com/kyverno/policy-reporter-ui...

CLEANSTART-2026-XW33274 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin-fips package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CLEANSTART-2026-KV53168 Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU

Security vulnerability affects the kyverno-policy-reporter-kyverno-plugin package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU...

CVE-2026-40898 vulnerabilities

Vulnerabilities for packages: spegel, kube-metrics-adapter, kubernetes-dns-node-cache, traefik, kubo, ipfs-cluster, mediamtx, spegel-fips, kyverno-policy-reporter-ui, coredns-fips, k8sgateway-fips, kubedock-fips, kubo-fips, kyverno-policy-reporter, opentelemetry-operator, teleport,...

GHSA-VVGJ-X9JQ-8CJ9 vulnerabilities

Vulnerabilities for packages: spegel, kube-metrics-adapter, kubernetes-dns-node-cache, traefik, kubo, ipfs-cluster, mediamtx, spegel-fips, kyverno-policy-reporter-ui, coredns-fips, k8sgateway-fips, kubedock-fips, kubo-fips, kyverno-policy-reporter, opentelemetry-operator, teleport,...

CLEANSTART-2026-GB46352 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2026-25679, CVE-2026-26958, CVE-2026-27139, CVE-2026-27141, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33186, CVE-2026-33810, CVE-2026-34986, CVE-2026-39883, ghsa-2464-8j7c-4cjm, ghsa-78h2-9frx-2jm8, ghsa-fw7p-63qq-7hpr, ghsa-hfvc-g4fc-pqhx, ghsa-p77j-4mvh-x3m3, ghsa-xmrv-pmrh-hhx2 applied in versions: 3.3.2-r0, 3.5.0-r0, 3.7.2-r0, 3.7.3-r0, 3.7.3-r1, 3.7.3-r2, 3.7.4-r0

Multiple security vulnerabilities affect the kyverno-policy-reporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-GXHX-2686-5H9G vulnerabilities

Vulnerabilities for packages: kyverno-policy-reporter, atlantis, bento, kubernetes-event-exporter, argo-rollouts, argo-events, goreleaser, argo-cd, kubewatch...

CVE-2026-44245 Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component

Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses...

CVE-2026-44245

CVE-2026-44245 affects Kyverno’s policy-reporter-ui where the PropertyCard.vue component uses Vue.js v-html to render non-URL strings, bypassing escaping and allowing stored HTML payloads from Kubernetes PolicyReport.results[].properties to flow into the DOM. The isURL() guard only filters http/h...

Kyverno policy-reporter-ui has XSS via Stored Property Values in PropertyCard Component

Summary Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that interpolation provides. The PropertyCard.vue component uses v-html for the else branch of the URL check, meaning any non-URL string value flows...

CLEANSTART-2026-WB12909 During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Multiple security vulnerabilities affect the kyverno-policy-reporter-kyverno-plugin-fips package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions. See references for individual vulnerabili...