kyverno-fips-reports-controller-1.14

Direct Vulnerabilities

Known vulnerabilities in the kyverno-fips-reports-controller-1.14 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2026-49834	*
L GO-2026-5932	*
L CVE-2026-42505	*
L CVE-2026-39822	*
L CVE-2026-50163	*
L CVE-2026-50162	*
L GHSA-vh4v-2xq2-g5cg	*
L CVE-2026-48978	*
L CVE-2026-50151	*
L CVE-2026-49835	*
L GHSA-vrw8-fxc6-2r93	*
L GHSA-xmrv-pmrh-hhx2	*
L GHSA-9g5q-2w5x-hmxf	*
L CVE-2026-49478	*
L Uncontrolled Memory Allocation	*
L Improper Certificate Validation	*
L Race Condition	*
L GHSA-rjr7-jggh-pgcp	*
L CVE-2026-48702	*
L CVE-2026-2303	*
L Improper Restriction of Rendered UI Layers or Frames	*
L Missing Authorization	*
L Improper Verification of Cryptographic Signature	*
L Improper Certificate Validation	*
L Improper Certificate Validation	*
L CVE-2026-42507	*
L CVE-2026-39821	*
L CVE-2026-39824	*
L Cross-site Scripting (XSS)	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
L Improper Restriction of Rendered UI Layers or Frames	*
L CVE-2026-27145	*
L Out-of-Bounds	*
L Integer Overflow or Wraparound	*
L CVE-2026-46598	*
L Resource Exhaustion	*
L Improper Restriction of Rendered UI Layers or Frames	*
M CVE-2025-47911	*
L CVE-2026-42504	*
L GHSA-459x-q9hg-4gpq	*
L Deserialization of Untrusted Data	*
L Reachable Assertion	*
L Incorrect Type Conversion or Cast	*
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	*
L CVE-2026-46595	*
L Improper Certificate Validation	*
L GHSA-mqqf-5wvp-8fh8	*
L Missing Authorization	*
L Improper Certificate Validation	*
L Cross-site Scripting (XSS)	*
L Improper Encoding or Escaping of Output	*
H NULL Pointer Dereference	*
H Double Free	*
L CVE-2026-39825	*
H Allocation of Resources Without Limits or Throttling	*
L CVE-2026-42499	*
M Link Following	*
M Out-of-bounds Write	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L CVE-2026-42501	*
L GHSA-pmwq-pjrm-6p5r	*
L Reachable Assertion	*
H Integer Overflow or Wraparound	*
L GHSA-3xc5-wrhm-f963	*
C CVE-2026-27143	<1.14.5-r7
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.14.5-r7
L GHSA-8wfp-579w-6r25	*
L GHSA-cvq5-hhx3-f99p	*
L GHSA-f9g8-6ppc-pqq4	*
L Insecure Storage of Sensitive Information	*
L GHSA-qr4g-8hrp-c4rw	*
L GHSA-fmqp-4wfc-w3v7	*
H Improper Certificate Validation	<1.14.5-r7
M Cross-site Scripting (XSS)	<1.14.5-r7
H Incorrect Authorization	<1.14.5-r7
M Link Following	<1.14.5-r7
H Improper Certificate Validation	<1.14.5-r7
H Allocation of Resources Without Limits or Throttling	<1.14.5-r7
L CVE-2026-32280	<1.14.5-r7
M Allocation of Resources Without Limits or Throttling	<1.14.5-r7
H Untrusted Search Path	*
L Uncaught Exception	*
L Integer Underflow	*
L Improper Validation of Array Index	*
L Improper Authorization	*
L Direct Request ('Forced Browsing')	*
L Directory Traversal	*
L Improper Certificate Validation	*
L Improper Certificate Validation	*
L Cross-site Scripting (XSS)	*
H CVE-2025-15558	*
L Untrusted Search Path	*
C CVE-2026-1229	*
L Improper Initialization	*
M Improper Validation of Integrity Check Value	*
L CVE-2025-61732	*
C CVE-2025-68121	*
H Improper Verification of Cryptographic Signature	*
L NULL Pointer Dereference	*
L Improper Privilege Management	*
H Reachable Assertion	*
M Allocation of Resources Without Limits or Throttling	*
L Server-Side Request Forgery (SSRF)	*
L Directory Traversal	*
M Directory Traversal	*
L CVE-2025-61730	<1.14.5-r2
L Allocation of Resources Without Limits or Throttling	<1.14.5-r2
L Out-of-bounds Write	<1.14.5-r2
L Allocation of Resources Without Limits or Throttling	<1.14.5-r2
L CVE-2025-61731	<1.14.5-r2
L CVE-2025-58181	*
L Asymmetric Resource Consumption (Amplification)	*
M Insufficient Verification of Data Authenticity	*
L CVE-2025-47914	*
L Asymmetric Resource Consumption (Amplification)	*
M Server-Side Request Forgery (SSRF)	*

kyverno-fips-reports-controller-1.14

Direct Vulnerabilities

Fix vulnerabilities automatically