Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2025/04/29 4:39 p.m.24 views

Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements

Summary Due to a missing error propagation in function GetNamespaceSelectorsFromNamespaceLister in pkg/utils/engine/labels.go it may happen that policy rules using namespace selectors in their match statements are mistakenly not applied during admission review request processing. As a consequence...

8.5CVSS6.8AI score0.00704EPSS
SaveExploits1References5Affected Software1
Rows per page
Query Builder