https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 20:20:43 +0000 https://cve.radiocsirt.org/vuln/bit-kyverno-2022-47633 <p><strong>Affected:</strong> Bitnami: kyverno</p> <p>An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.</p> <p><strong>Affected:</strong> Bitnami: kyverno</p> <p>An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.</p> https://cve.radiocsirt.org/vuln/bit-kyverno-2022-47633 https://cve.radiocsirt.org/vuln/euvd-2026-229329 EUVD-2026-229329 https://cve.radiocsirt.org/vuln/euvd-2026-229329 https://cve.radiocsirt.org/vuln/fkie_cve-2022-47633 <p>An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.</p> <p>An image signature validation bypass vulnerability in Kyverno 1.8.3 and 1.8.4 allows a malicious image registry (or a man-in-the-middle attacker) to inject unsigned arbitrary container images into a protected Kubernetes cluster. This is fixed in 1.8.5. This has been fixed in 1.8.5 and mitigations are available for impacted releases.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-47633 https://cve.radiocsirt.org/vuln/ghsa-m3cq-xcx9-3gvm <p><strong>Affected:</strong> Go: github.com/kyverno/kyverno</p> <p>### Impact</p> <p>Users of Kyverno on versions 1.8.3 or 1.8.4 who use `verifyImages` rules to verify container image signatures, and do not prevent use of unknown registries.</p> <p>### Patches</p> <p>This issue has been fixed in version [1.8.5](https://github.com/kyverno/kyverno/releases/tag/v1.8.5)</p> <p>### Workarounds</p> <p>Configure a Kyverno policy to restrict registries to a set of secure trusted image registries ([sample](https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries/)).</p> <p>### References</p> <p><strong>Affected:</strong> Go: github.com/kyverno/kyverno</p> <p>### Impact</p> <p>Users of Kyverno on versions 1.8.3 or 1.8.4 who use `verifyImages` rules to verify container image signatures, and do not prevent use of unknown registries.</p> <p>### Patches</p> <p>This issue has been fixed in version [1.8.5](https://github.com/kyverno/kyverno/releases/tag/v1.8.5)</p> <p>### Workarounds</p> <p>Configure a Kyverno policy to restrict registries to a set of secure trusted image registries ([sample](https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries/)).</p> <p>### References</p> https://cve.radiocsirt.org/vuln/ghsa-m3cq-xcx9-3gvm https://cve.radiocsirt.org/vuln/gsd-2022-47633 gsd-2022-47633 https://cve.radiocsirt.org/vuln/gsd-2022-47633