kyverno-fips-cleanup-controller-1.15

Direct Vulnerabilities

Known vulnerabilities in the kyverno-fips-cleanup-controller-1.15 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Improper Validation of Array Index	*
L Integer Underflow	*
L Uncaught Exception	*
L GHSA-8wfp-579w-6r25	*
L GHSA-fmqp-4wfc-w3v7	*
L CVE-2026-41506	*
L Insecure Storage of Sensitive Information	*
L Incorrect Authorization	*
C Information Exposure	*
L Allocation of Resources Without Limits or Throttling	*
L Reachable Assertion	*
L Integer Overflow or Wraparound	*
C CVE-2026-27143	<1.15.3-r7
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.15.3-r7
H Incorrect Authorization	<1.15.3-r7
H Allocation of Resources Without Limits or Throttling	<1.15.3-r7
H Improper Certificate Validation	<1.15.3-r7
M Allocation of Resources Without Limits or Throttling	<1.15.3-r7
H Improper Certificate Validation	<1.15.3-r7
M Cross-site Scripting (XSS)	<1.15.3-r7
M Link Following	<1.15.3-r7
L CVE-2026-32280	<1.15.3-r7
C CVE-2026-1229	*
L Untrusted Search Path	*
H CVE-2025-15558	*
L Improper Certificate Validation	<1.15.3-r6
L Directory Traversal	<1.15.3-r6
L Cross-site Scripting (XSS)	<1.15.3-r6
L Improper Certificate Validation	<1.15.3-r6
L Direct Request ('Forced Browsing')	<1.15.3-r6
L Improper Initialization	*
M Improper Validation of Integrity Check Value	*
M Directory Traversal	*
L Directory Traversal	*
L NULL Pointer Dereference	*
L Server-Side Request Forgery (SSRF)	*
C CVE-2025-68121	<1.15.3-r3
L CVE-2025-61732	<1.15.3-r3
H Reachable Assertion	*
H Improper Verification of Cryptographic Signature	*
L Allocation of Resources Without Limits or Throttling	<1.15.2-r2
L Allocation of Resources Without Limits or Throttling	<1.15.2-r2
L Out-of-bounds Write	<1.15.2-r2
L CVE-2025-61731	<1.15.2-r2
L CVE-2025-61730	<1.15.2-r2
L Improper Privilege Management	<1.15.3-r0
M Allocation of Resources Without Limits or Throttling	<1.15.3-r0
L Asymmetric Resource Consumption (Amplification)	*
M Server-Side Request Forgery (SSRF)	*
L Asymmetric Resource Consumption (Amplification)	*
M Insufficient Verification of Data Authenticity	*

kyverno-fips-cleanup-controller-1.15

Direct Vulnerabilities

Fix vulnerabilities automatically