en
Kyverno is a CNCF open-source project that provides a Kubernetes-native policy engine for platform engineering and security teams. It automates security, compliance, governance, and operational controls across cloud-native environments and is maintained by a worldwide community of users and contributors.
As of 11/08/2026, kyverno recorded 33 security vulnerabilities in the last 90 days across 1 products, including 31 rated High or above and 0 known exploited vulnerabilities (KEV) that should be prioritized for immediate remediation.
Over the last 90 days, kyverno had the most security vulnerabilities in the kyverno ecosystem, with 33 vulnerabilities—approximately 100% of the provider's total vulnerabilities during this period.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2023-42814Denial of service from malicious image manifest in kyvernoCVE-2023-42813Denial of service from malicious manifest in kyvernoCVE-2023-34091Kyverno resource with a deletionTimestamp may allow policy circumventionCVE-2023-33191kyverno seccomp control can be circumvented| Vulnerability | Exploitation status | Fix | Affected product | Published | Severity |
|---|---|---|---|---|---|
CVE-2023-42814Denial of service from malicious image manifest in kyverno | Exploitation statusNot confirmed | FixNo | Affected productkyverno | Published11/13/2023 | SeverityLow |
CVE-2023-42813Denial of service from malicious manifest in kyverno | Exploitation statusNot confirmed | FixNo | Affected productkyverno | Published11/13/2023 | |
CVE-2023-34091Kyverno resource with a deletionTimestamp may allow policy circumvention | Exploitation statusNot exploited | FixYes | Affected productkyverno | Published | |
CVE-2023-33191kyverno seccomp control can be circumvented | Exploitation statusNot exploited | FixYes | Affected productkyverno | Published05/30/2023 |
52 Results | Page 2 of 2
| SeverityMedium |
| SeverityMedium |