kyverno-fips-init-container-1.16

Direct Vulnerabilities

Known vulnerabilities in the kyverno-fips-init-container-1.16 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Out-of-Bounds	<1.16.4-r3
L Cross-site Scripting (XSS)	<1.16.4-r3
L CVE-2026-46595	<1.16.4-r3
L Deserialization of Untrusted Data	<1.16.4-r3
L Missing Authorization	<1.16.4-r3
L CVE-2026-39824	<1.16.4-r3
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1.16.4-r3
L Integer Overflow or Wraparound	<1.16.4-r3
L CVE-2026-39821	<1.16.4-r3
L Improper Restriction of Rendered UI Layers or Frames	<1.16.4-r3
L Improper Certificate Validation	<1.16.4-r3
L Improper Certificate Validation	<1.16.4-r3
L Resource Exhaustion	<1.16.4-r3
L CVE-2026-46598	<1.16.4-r3
L Improper Certificate Validation	<1.16.4-r3
L Improper Restriction of Rendered UI Layers or Frames	<1.16.4-r3
L Improper Restriction of Rendered UI Layers or Frames	<1.16.4-r3
L Incorrect Type Conversion or Cast	<1.16.4-r3
L Missing Authorization	<1.16.4-r3
L Improper Verification of Cryptographic Signature	<1.16.4-r3
L CVE-2026-42507	<1.16.4-r2
L CVE-2026-42504	<1.16.4-r2
L CVE-2026-27145	<1.16.4-r2
L GHSA-mqqf-5wvp-8fh8	<1.16.4-r0
L GHSA-qr4g-8hrp-c4rw	*
C Information Exposure	*
L Incorrect Authorization	*
L Insecure Storage of Sensitive Information	*
L GHSA-pmwq-pjrm-6p5r	*
H NULL Pointer Dereference	<1.16.4-r1
H Double Free	<1.16.4-r1
L Improper Encoding or Escaping of Output	<1.16.4-r1
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.16.4-r1
L Cross-site Scripting (XSS)	<1.16.4-r1
L CVE-2026-42501	<1.16.4-r1
M Out-of-bounds Write	<1.16.4-r1
L CVE-2026-42499	<1.16.4-r1
M Link Following	<1.16.4-r1
H Allocation of Resources Without Limits or Throttling	<1.16.4-r1
L CVE-2026-39825	<1.16.4-r1
L GHSA-8wfp-579w-6r25	*
L Server-Side Request Forgery (SSRF)	*
H Insufficiently Protected Credentials	*
L Improper Certificate Validation	*
H Integer Overflow or Wraparound	*
L Allocation of Resources Without Limits or Throttling	<1.16.4-r0
L Reachable Assertion	<1.16.4-r0
L Uncaught Exception	<1.16.4-r0
H Untrusted Search Path	<1.16.4-r0
L Integer Underflow	<1.16.4-r0
L Improper Authorization	<1.16.4-r0
L Improper Validation of Array Index	<1.16.4-r0
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.16.3-r7
C CVE-2026-27143	<1.16.3-r7
L GHSA-fmqp-4wfc-w3v7	<1.16.2-r0
H Improper Certificate Validation	<1.16.3-r7
M Link Following	<1.16.3-r7
L CVE-2026-32280	<1.16.3-r7
M Cross-site Scripting (XSS)	<1.16.3-r7
H Incorrect Authorization	<1.16.3-r7
H Improper Certificate Validation	<1.16.3-r7
M Allocation of Resources Without Limits or Throttling	<1.16.3-r7
H Allocation of Resources Without Limits or Throttling	<1.16.3-r7
L Untrusted Search Path	<1.16.4-r0
H CVE-2025-15558	<1.16.4-r0
L Cross-site Scripting (XSS)	<1.16.3-r6
C CVE-2026-1229	<1.16.4-r0
L Improper Certificate Validation	<1.16.3-r6
L Directory Traversal	<1.16.3-r6
L Direct Request ('Forced Browsing')	<1.16.3-r6
L Improper Certificate Validation	<1.16.3-r6
L Improper Initialization	<1.16.4-r0
M Improper Validation of Integrity Check Value	<1.16.4-r0
H Improper Verification of Cryptographic Signature	<1.16.4-r0
M Directory Traversal	<1.16.4-r0
L CVE-2025-61732	<1.16.3-r3
C CVE-2025-68121	<1.16.3-r3
L NULL Pointer Dereference	<1.16.4-r0
H Reachable Assertion	<1.16.4-r0
L Server-Side Request Forgery (SSRF)	<1.16.4-r0
L Directory Traversal	<1.16.4-r0
M Allocation of Resources Without Limits or Throttling	<1.16.3-r0
L Out-of-bounds Write	<1.16.2-r2
L Allocation of Resources Without Limits or Throttling	<1.16.2-r2
L Improper Privilege Management	<1.16.3-r0
L Allocation of Resources Without Limits or Throttling	<1.16.2-r2
L CVE-2025-61730	<1.16.2-r2
L CVE-2025-61731	<1.16.2-r2
M Server-Side Request Forgery (SSRF)	<1.16.4-r0
L Asymmetric Resource Consumption (Amplification)	<1.16.4-r0
L Asymmetric Resource Consumption (Amplification)	<1.16.4-r0
M Insufficient Verification of Data Authenticity	<1.16.4-r0

kyverno-fips-init-container-1.16

Direct Vulnerabilities

Fix vulnerabilities automatically