VDB
GHSA-459x-q9hg-4gpq
GHSA-459x-q9hg-4gpq
PUBLISHED
CVSS 7.5 HIGH
Kyverno vulnerable to SSRF via Service Calls
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | kyverno/kyverno | 0 |
| chainguard | commercial-kyverno-1.16 | 0, 0, 0 |
| wolfi | kyverno-1.16 | *, *, * |
| chainguard | kyverno-fips-1.12 | 0, 0 |
| chainguard | reports-server | *, *, * |
| chainguard | kyverno-fips-1.15 | *, *, * |
| chainguard | kyverno-1.18 | *, *, * |
| chainguard | kyverno-1.13 | 0, 0, 0 |
| chainguard | kyverno-fips-1.16 | *, *, * |
| wolfi | kyverno-1.18 | *, *, * |
| chainguard | kyverno-1.17 | *, *, * |
| github.com | kyverno/kyverno | 0, 0, 0 |
| wolfi | kyverno-notation-aws | *, *, * |
| chainguard | commercial-kyverno-1.15 | 0, 0, 0 |
| chainguard | kyverno-1.15 | *, *, * |
| chainguard | kyverno-1.16 | *, *, * |
| chainguard | commercial-kyverno-1.13 | 0, 0, 0 |
| chainguard | commercial-kyverno-1.17 | 0, 0, 0 |
| chainguard | commercial-kyverno-1.14 | 0, 0, 0 |
| chainguard | kyverno-notation-aws | *, *, * |
…and 8 more
Timeline
- Apr 15, 2025 CVE Published
- Oct 31, 2025 CVE Updated