Skip to main content
cve.nowby Sazabi
← Go
GoPackage

github.com/kubewarden/kubewarden-controller

4 known vulnerabilities (4 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 4 medium
Registry
pkg.go.dev

Advisories 4

  • CVE-2026-42541Medium 4.3

    Kubewarden: RBAC Reconnaissance via unchecked can_i host capability call

    Affected: fixed in 1.35.0.

  • CVE-2026-29773Medium 4.3

    kubewarden-controller cross-namespace data exfiltration via deprecated host callback binding

    Affected: fixed in 1.33.0.

  • CVE-2025-24376Medium 6.5

    The kubewarden-controller AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources

    Affected: from 1.7.0, fixed in 1.21.0.

  • CVE-2025-24784Medium 4.3

    kubewarden-controller has an Information leak via AdmissionPolicyGroup Resource

    Affected: from 1.17.0, fixed in 1.21.0.