kyverno-reports-controller-1.15

Direct Vulnerabilities

Known vulnerabilities in the kyverno-reports-controller-1.15 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L Cross-site Scripting (XSS)	<1.15.3-r8
L CVE-2026-46595	<1.15.3-r8
L Improper Certificate Validation	<1.15.3-r8
L Improper Restriction of Rendered UI Layers or Frames	<1.15.3-r8
L Missing Authorization	<1.15.3-r8
L CVE-2026-39824	<1.15.3-r8
L Improper Certificate Validation	<1.15.3-r8
L Improper Restriction of Rendered UI Layers or Frames	<1.15.3-r8
L Out-of-Bounds	<1.15.3-r8
L Improper Verification of Cryptographic Signature	<1.15.3-r8
L Improper Certificate Validation	<1.15.3-r8
L Integer Overflow or Wraparound	<1.15.3-r8
L Deserialization of Untrusted Data	<1.15.3-r8
L CVE-2026-46598	<1.15.3-r8
L Improper Enforcement of Message Integrity During Transmission in a Communication Channel	<1.15.3-r8
L Incorrect Type Conversion or Cast	<1.15.3-r8
L Resource Exhaustion	<1.15.3-r8
L Improper Restriction of Rendered UI Layers or Frames	<1.15.3-r8
L CVE-2026-39821	<1.15.3-r8
L Missing Authorization	<1.15.3-r8
L CVE-2026-42504	<1.15.3-r7
L CVE-2026-42507	<1.15.3-r7
L Reachable Assertion	<1.15.2-r3
M Loop with Unreachable Exit Condition ('Infinite Loop')	<1.15.2-r3
L CVE-2026-27145	<1.15.3-r7
M CVE-2025-47911	<1.15.2-r3
L GHSA-qr4g-8hrp-c4rw	*
L GHSA-8wfp-579w-6r25	*
L Incorrect Authorization	*
L GHSA-pmwq-pjrm-6p5r	*
H NULL Pointer Dereference	<1.15.3-r6
H Loop with Unreachable Exit Condition ('Infinite Loop')	<1.15.3-r6
L CVE-2026-42501	<1.15.3-r6
L CVE-2026-39825	<1.15.3-r6
L Improper Encoding or Escaping of Output	<1.15.3-r6
M Out-of-bounds Write	<1.15.3-r6
L Cross-site Scripting (XSS)	<1.15.3-r6
H Double Free	<1.15.3-r6
L CVE-2026-42499	<1.15.3-r6
M Link Following	<1.15.3-r6
H Allocation of Resources Without Limits or Throttling	<1.15.3-r6
L Improper Authorization	*
L Integer Underflow	*
L Improper Validation of Array Index	*
L Uncaught Exception	*
H Insufficiently Protected Credentials	*
C Information Exposure	*
L GHSA-fmqp-4wfc-w3v7	*
L Insecure Storage of Sensitive Information	*
H Integer Overflow or Wraparound	*
L Reachable Assertion	*
L Allocation of Resources Without Limits or Throttling	*
C CVE-2026-27143	<1.15.3-r5
H Access of Resource Using Incompatible Type ('Type Confusion')	<1.15.3-r5
H Incorrect Authorization	<1.15.3-r5
H Improper Certificate Validation	<1.15.3-r5
H Allocation of Resources Without Limits or Throttling	<1.15.3-r5
M Link Following	<1.15.3-r5
L CVE-2026-32280	<1.15.3-r5
M Cross-site Scripting (XSS)	<1.15.3-r5
H Improper Certificate Validation	<1.15.3-r5
M Allocation of Resources Without Limits or Throttling	<1.15.3-r5
H CVE-2025-15558	*
L Untrusted Search Path	*
L Cross-site Scripting (XSS)	<1.15.3-r4
L Directory Traversal	<1.15.3-r4
C CVE-2026-1229	*
L Direct Request ('Forced Browsing')	<1.15.3-r4
L Improper Initialization	*
M Improper Validation of Integrity Check Value	*
M Directory Traversal	*
C CVE-2025-68121	<1.15.3-r3
L CVE-2025-61732	<1.15.3-r3
H Reachable Assertion	*
L Directory Traversal	*
L NULL Pointer Dereference	*
L Server-Side Request Forgery (SSRF)	*
H Improper Verification of Cryptographic Signature	*
L Allocation of Resources Without Limits or Throttling	<1.15.2-r9
L CVE-2025-61730	<1.15.2-r9
L Out-of-bounds Write	<1.15.2-r9
L Allocation of Resources Without Limits or Throttling	<1.15.2-r9
L CVE-2025-61731	<1.15.2-r9
L Improper Privilege Management	<1.15.3-r0
M Allocation of Resources Without Limits or Throttling	<1.15.3-r0
M Insufficient Verification of Data Authenticity	*
M Server-Side Request Forgery (SSRF)	*
L Asymmetric Resource Consumption (Amplification)	*
L Asymmetric Resource Consumption (Amplification)	*
L Improper Certificate Validation	<1.15.2-r4
L Improper Certificate Validation	<1.15.2-r4
L CVE-2025-47914	<1.15.2-r3
L CVE-2025-58181	<1.15.2-r3
L Allocation of Resources Without Limits or Throttling	<1.15.2-r1
L CVE-2025-58186	<1.15.2-r1
L CVE-2025-61725	<1.15.2-r1
L Allocation of Resources Without Limits or Throttling	<1.15.2-r1
L Improper Certificate Validation	<1.15.2-r1
L Algorithmic Complexity	<1.15.2-r1
L CVE-2025-58183	<1.15.2-r1
L Allocation of Resources Without Limits or Throttling	<1.15.2-r1
L CVE-2025-47912	<1.15.2-r1
L Information Exposure Through Log Files	<1.15.2-r1
L CVE-2025-47910	<1.15.2-r0
L CVE-2025-47906	<1.15.0-r1
L Race Condition	<1.15.0-r1

kyverno-reports-controller-1.15

Direct Vulnerabilities

Fix vulnerabilities automatically