Approved changes feed: RSS · Atom
cpe:2.3:a:kyverno:kyverno:1.8.4:*:*:*:*:*:*:*
part: a version: 1.8.4 update: *
| Vendor | Kyverno (905b424d-e9b0-5233-9553-bfd81a197353) |
|---|---|
| Product | Kyverno (746e0018-c7b9-5e1b-a6d2-b23941264abc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kyverno/kyverno |
purl2cpe | 2026-06-01 10:13:10.280120 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-47633 |
vulnerable | 2026-06-08 05:50:40.844434 |
Details available
An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.
Published: 2022-12-23T00:00:00.000Z
Updated: 2025-04-15T03:22:55.828Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.