{"schema":1,"generated_at":"2026-10-05T04:29:09Z","source_run_url":"https://github.com/nirmata/enterprise-kyverno/actions/runs/37262759575","settings":{"severity_filter":["CRITICAL","HIGH"],"mode":"discovery","suppressions_applied":false,"platform":"linux/amd64","dedupe_key":"id+pkg"},"scanners":{"trivy":{"version":"0.74.0","db_updated_at":"2026-10-05T01:10:31.191619217Z"},"grype":{"version":"0.117.0","db_built_at":"2026-10-04T08:11:47Z"}},"components":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"series":[{"series":"1.14","oss":{"registry":"ghcr.io/kyverno","tag":"v1.14.5","published_at":"2025-11-05T05:06:43Z","images":[{"name":"kyverno","ref":"ghcr.io/kyverno/kyverno:v1.14.5","digest":"sha256:32c86a27776dadd840583ba8c9d8b2365ada6eebfac6d0ef11d60430bb5ced58","os":{"family":"alpine","name":"3.23.0_alpha20251016"}},{"name":"kyvernopre","ref":"ghcr.io/kyverno/kyvernopre:v1.14.5","digest":"sha256:4a99a529b6214599f9d97e1737110c14546729dea35e521dd44deac577fec062","os":{"family":"alpine","name":"3.23.0_alpha20251016"}},{"name":"background-controller","ref":"ghcr.io/kyverno/background-controller:v1.14.5","digest":"sha256:9d78489d9b912e43a97eab64fa8eb6a55295ece1269aa9c7ad71eef75644baa8","os":{"family":"alpine","name":"3.23.0_alpha20251016"}},{"name":"cleanup-controller","ref":"ghcr.io/kyverno/cleanup-controller:v1.14.5","digest":"sha256:3ce75ad859a581bb81c8b2736c0acdee1bd3c551a0470e0ba7575f7579f5e227","os":{"family":"alpine","name":"3.23.0_alpha20251016"}},{"name":"reports-controller","ref":"ghcr.io/kyverno/reports-controller:v1.14.5","digest":"sha256:5954853010f67a66309cd3147c0e5d4a599cc1672c3fcbe80e7d8acf0ea2d72b","os":{"family":"alpine","name":"3.23.0_alpha20251016"}},{"name":"kyverno-cli","ref":"ghcr.io/kyverno/kyverno-cli:v1.14.5","digest":"sha256:dc088133f136d6964322cd90a527474a21fc6e1bb53ee6ee4be920f71da0224c","os":{"family":"alpine","name":"3.23.0_alpha20251016"}}],"counts":{"critical":7,"high":60,"total":67},"findings":[{"id":"CVE-2025-15558","severity":"HIGH","pkg":"github.com/docker/cli","installed":"v27.5.0+incompatible","fixed":"29.2.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2025-47913","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.43.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2025-4116"]},{"id":"CVE-2025-58187","severity":"HIGH","pkg":"stdlib","installed":"go1.23.12","fixed":"1.24.9, 1.25.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GO-2025-4007"]},{"id":"CVE-2025-58188","severity":"HIGH","pkg":"stdlib","installed":"go1.23.12","fixed":"1.24.8, 1.25.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GO-2025-4013"]},{"id":"CVE-2025-61723","severity":"HIGH","pkg":"stdlib","installed":"go1.23.12","fixed":"1.24.8, 1.25.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GO-2025-4009"]},{"id":"CVE-2025-61725","severity":"HIGH","pkg":"stdlib","installed":"go1.23.12","fixed":"1.24.8, 1.25.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GO-2025-4006"]},{"id":"CVE-2025-61726","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.24.12, 1.25.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4341"]},{"id":"CVE-2025-61729","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.24.11, 1.25.5","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2025-4155"]},{"id":"CVE-2025-66506","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.6.6","fixed":"1.8.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f83f-xpx7-ffpw"]},{"id":"CVE-2025-66564","severity":"HIGH","pkg":"github.com/sigstore/timestamp-authority","installed":"v1.2.4","fixed":"2.0.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-4qg8-fj49-pxjh"]},{"id":"CVE-2025-68121","severity":"CRITICAL","pkg":"stdlib","installed":"v1.23.12","fixed":"1.24.13, 1.25.7, 1.26.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4337"]},{"id":"CVE-2026-24051","severity":"HIGH","pkg":"go.opentelemetry.io/otel/sdk","installed":"v1.35.0","fixed":"1.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-9h8m-3fm2-qjrq"]},{"id":"CVE-2026-25679","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.8, 1.26.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4601"]},{"id":"CVE-2026-25681","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.38.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27136","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.38.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27145","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5037"]},{"id":"CVE-2026-32280","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.9, 1.26.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4947"]},{"id":"CVE-2026-32281","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.9, 1.26.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4946"]},{"id":"CVE-2026-32283","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.9, 1.26.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4870"]},{"id":"CVE-2026-33186","severity":"CRITICAL","pkg":"google.golang.org/grpc","installed":"v1.71.1","fixed":"1.79.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-p77j-4mvh-x3m3"]},{"id":"CVE-2026-33811","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4981"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.38.0","fixed":"0.53.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33818","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5972"]},{"id":"CVE-2026-34986","severity":"HIGH","pkg":"github.com/go-jose/go-jose/v3","installed":"v3.0.4","fixed":"3.0.5","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-78h2-9frx-2jm8"]},{"id":"CVE-2026-34986","severity":"HIGH","pkg":"github.com/go-jose/go-jose/v4","installed":"v4.0.5","fixed":"4.1.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-78h2-9frx-2jm8"]},{"id":"CVE-2026-39820","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4986"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.38.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39822","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.12, 1.26.5, 1.27.0-rc.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39828","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39829","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-w879-237q-wc7r"]},{"id":"CVE-2026-39830","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vgwf-h737-ff37"]},{"id":"CVE-2026-39831","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-89gr-r52h-f8rx"]},{"id":"CVE-2026-39832","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5wc-c3c7-36mc"]},{"id":"CVE-2026-39834","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GHSA-rm3j-f69w-wqmq"]},{"id":"CVE-2026-39835","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39836","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4971"]},{"id":"CVE-2026-39883","severity":"HIGH","pkg":"go.opentelemetry.io/otel/sdk","installed":"v1.35.0","fixed":"1.43.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hfvc-g4fc-pqhx"]},{"id":"CVE-2026-42499","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4977"]},{"id":"CVE-2026-42504","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5038"]},{"id":"CVE-2026-42508","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-5cgq-3rg8-m6cv"]},{"id":"CVE-2026-44973","severity":"HIGH","pkg":"github.com/go-git/go-billy/v5","installed":"v5.6.2","fixed":"5.9.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-qw64-3x98-g7q2"]},{"id":"CVE-2026-45022","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.14.0","fixed":"5.19.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-389r-gv7p-r3rp"]},{"id":"CVE-2026-46595","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-46597","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-q4h4-gmj2-qvw2"]},{"id":"CVE-2026-46600","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.38.0","fixed":"0.56.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-48702","severity":"HIGH","pkg":"github.com/sigstore/rekor","installed":"v1.3.9","fixed":"1.5.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-47q9-m4ww-924m"]},{"id":"CVE-2026-49478","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.6.6","fixed":"1.8.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5mr-q85p-6hh6"]},{"id":"CVE-2026-50151","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.5.0","fixed":"2.6.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-50163","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.5.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56852","severity":"HIGH","pkg":"golang.org/x/text","installed":"v0.23.0","fixed":"0.39.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5970"]},{"id":"CVE-2026-56853","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6089"]},{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-56858","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56859","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6088"]},{"id":"CVE-2026-56860","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56862","severity":"HIGH","pkg":"stdlib","installed":"v1.23.12","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6090"]},{"id":"CVE-2026-56864","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.24.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56865","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.24.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-71556","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.14.0","fixed":"5.19.2","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hc8v-wwc9-vgxm"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.36.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.71.1","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.71.1","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]},{"id":"CVE-2026-85731","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.5.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-m37j-52j7-pjw7"]},{"id":"GHSA-hrxh-6v49-42gf","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.71.1","fixed":"1.82.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]}]},"n4k":{"registry":"ghcr.io/nirmata","tag":"v1.14.4-n4k.nirmata.7","published_at":"2026-08-05T18:12:45Z","images":[{"name":"kyverno","ref":"ghcr.io/nirmata/kyverno:v1.14.4-n4k.nirmata.7","digest":"sha256:1f8b1ca0f0d75fb3a28a3515ec23594bcf86b7dd5de3e060490e91fb57695ea3","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyvernopre","ref":"ghcr.io/nirmata/kyvernopre:v1.14.4-n4k.nirmata.7","digest":"sha256:99c18acb24328d387db2e6fc8cf0e7575e4bbfa49b8825407c1d883648045672","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"background-controller","ref":"ghcr.io/nirmata/background-controller:v1.14.4-n4k.nirmata.7","digest":"sha256:eaa4f02ff6738a4f2bee3b78b46b8b78cc2648c4f5384a050f6ff1a48d9b77c8","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"cleanup-controller","ref":"ghcr.io/nirmata/cleanup-controller:v1.14.4-n4k.nirmata.7","digest":"sha256:0cb8737717e4a1ad440baa6a68e020baca7c9da5960661aef0db48646ec57ec4","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"reports-controller","ref":"ghcr.io/nirmata/reports-controller:v1.14.4-n4k.nirmata.7","digest":"sha256:3f19674dbf3bda153d58cc270bb0ec50cf0dc079f1abfe18c2f382dcc2720ed2","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyverno-cli","ref":"ghcr.io/nirmata/kyverno-cli:v1.14.4-n4k.nirmata.7","digest":"sha256:c115db99ec69cb5c0159619e76eab97d919163870c0d378f61c9c9399db9d1dd","os":{"family":"alpine","name":"3.25.0_alpha20260805"}}],"counts":{"critical":0,"high":6,"total":6},"findings":[{"id":"CVE-2026-49478","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.8.5","fixed":"1.8.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5mr-q85p-6hh6"]},{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.82.1","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.82.1","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]}]}},{"series":"1.15","oss":{"registry":"ghcr.io/kyverno","tag":"v1.15.3","published_at":"2026-01-27T15:45:45Z","images":[{"name":"kyverno","ref":"ghcr.io/kyverno/kyverno:v1.15.3","digest":"sha256:0bc7bdefbce8a28d8d83a534f5aed30b252b1255a92780d340e2c1cd6639e612","os":{"family":"alpine","name":"3.24.0_alpha20251224"}},{"name":"kyvernopre","ref":"ghcr.io/kyverno/kyvernopre:v1.15.3","digest":"sha256:cc82795adfa153c52325efb26024a6e4b03564a4431ce2e5884be644d5916297","os":{"family":"alpine","name":"3.24.0_alpha20251224"}},{"name":"background-controller","ref":"ghcr.io/kyverno/background-controller:v1.15.3","digest":"sha256:a752540dc632fc1504786e9883ec0c44553e524e9a67e9f05caaf98d6491451b","os":{"family":"alpine","name":"3.24.0_alpha20251224"}},{"name":"cleanup-controller","ref":"ghcr.io/kyverno/cleanup-controller:v1.15.3","digest":"sha256:dde666ece64514af1564a46f008d7ba4843d3465a8e39dbb198a6312ef465acd","os":{"family":"alpine","name":"3.24.0_alpha20251224"}},{"name":"reports-controller","ref":"ghcr.io/kyverno/reports-controller:v1.15.3","digest":"sha256:7ec7d5a108a78c084fe54efeffadd8121764d19d47f4aa9a592795f54bc9e7f0","os":{"family":"alpine","name":"3.24.0_alpha20251224"}},{"name":"kyverno-cli","ref":"ghcr.io/kyverno/kyverno-cli:v1.15.3","digest":"sha256:620156608a75f594d9d14ff16fbd45142c351bf6063fcc21522f964479063eca","os":{"family":"alpine","name":"3.24.0_alpha20251224"}}],"counts":{"critical":7,"high":64,"total":71},"findings":[{"id":"CVE-2025-15558","severity":"HIGH","pkg":"github.com/docker/cli","installed":"v27.5.0+incompatible","fixed":"29.2.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2025-47913","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.43.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2025-4116"]},{"id":"CVE-2025-61726","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.24.12, 1.25.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4341"]},{"id":"CVE-2025-61729","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.24.11, 1.25.5","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2025-4155"]},{"id":"CVE-2025-66506","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.6.6","fixed":"1.8.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f83f-xpx7-ffpw"]},{"id":"CVE-2025-66564","severity":"HIGH","pkg":"github.com/sigstore/timestamp-authority","installed":"v1.2.4","fixed":"2.0.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-4qg8-fj49-pxjh"]},{"id":"CVE-2025-68121","severity":"CRITICAL","pkg":"stdlib","installed":"v1.24.9","fixed":"1.24.13, 1.25.7, 1.26.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4337"]},{"id":"CVE-2026-24051","severity":"HIGH","pkg":"go.opentelemetry.io/otel/sdk","installed":"v1.37.0","fixed":"1.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-9h8m-3fm2-qjrq"]},{"id":"CVE-2026-25679","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.8, 1.26.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4601"]},{"id":"CVE-2026-25681","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.41.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27136","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.41.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27145","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5037"]},{"id":"CVE-2026-29181","severity":"HIGH","pkg":"go.opentelemetry.io/otel","installed":"v1.37.0","fixed":"1.41.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-mh2q-q3fh-2475"]},{"id":"CVE-2026-32280","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.9, 1.26.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4947"]},{"id":"CVE-2026-32281","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.9, 1.26.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4946"]},{"id":"CVE-2026-32283","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.9, 1.26.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4870"]},{"id":"CVE-2026-33186","severity":"CRITICAL","pkg":"google.golang.org/grpc","installed":"v1.73.0","fixed":"1.79.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-p77j-4mvh-x3m3"]},{"id":"CVE-2026-33811","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4981"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.41.0","fixed":"0.53.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33818","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5972"]},{"id":"CVE-2026-34986","severity":"HIGH","pkg":"github.com/go-jose/go-jose/v3","installed":"v3.0.4","fixed":"3.0.5","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-78h2-9frx-2jm8"]},{"id":"CVE-2026-34986","severity":"HIGH","pkg":"github.com/go-jose/go-jose/v4","installed":"v4.0.5","fixed":"4.1.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-78h2-9frx-2jm8"]},{"id":"CVE-2026-39820","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4986"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.41.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39822","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.12, 1.26.5, 1.27.0-rc.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39828","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39829","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-w879-237q-wc7r"]},{"id":"CVE-2026-39830","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vgwf-h737-ff37"]},{"id":"CVE-2026-39831","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-89gr-r52h-f8rx"]},{"id":"CVE-2026-39832","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5wc-c3c7-36mc"]},{"id":"CVE-2026-39834","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GHSA-rm3j-f69w-wqmq"]},{"id":"CVE-2026-39835","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39836","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4971"]},{"id":"CVE-2026-39883","severity":"HIGH","pkg":"go.opentelemetry.io/otel/sdk","installed":"v1.37.0","fixed":"1.43.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hfvc-g4fc-pqhx"]},{"id":"CVE-2026-40868","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-q93q-v844-jrqp"]},{"id":"CVE-2026-41068","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"-","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-cvq5-hhx3-f99p"]},{"id":"CVE-2026-41323","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f9g8-6ppc-pqq4"]},{"id":"CVE-2026-41485","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"1.16.4, 1.17.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-fpjq-c37h-cqcv"]},{"id":"CVE-2026-42499","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4977"]},{"id":"CVE-2026-42504","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5038"]},{"id":"CVE-2026-42508","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-5cgq-3rg8-m6cv"]},{"id":"CVE-2026-44973","severity":"HIGH","pkg":"github.com/go-git/go-billy/v5","installed":"v5.6.2","fixed":"5.9.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-qw64-3x98-g7q2"]},{"id":"CVE-2026-45022","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.16.2","fixed":"5.19.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-389r-gv7p-r3rp"]},{"id":"CVE-2026-46595","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-46597","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-q4h4-gmj2-qvw2"]},{"id":"CVE-2026-46600","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.41.0","fixed":"0.56.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-48702","severity":"HIGH","pkg":"github.com/sigstore/rekor","installed":"v1.3.10","fixed":"1.5.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-47q9-m4ww-924m"]},{"id":"CVE-2026-49478","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.6.6","fixed":"1.8.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5mr-q85p-6hh6"]},{"id":"CVE-2026-50151","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.5.0","fixed":"2.6.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-50163","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.5.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56852","severity":"HIGH","pkg":"golang.org/x/text","installed":"v0.26.0","fixed":"0.39.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5970"]},{"id":"CVE-2026-56853","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6089"]},{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-56858","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56859","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6088"]},{"id":"CVE-2026-56860","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56862","severity":"HIGH","pkg":"stdlib","installed":"v1.24.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6090"]},{"id":"CVE-2026-56864","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.25.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56865","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.25.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-71556","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.16.2","fixed":"5.19.2","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hc8v-wwc9-vgxm"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.39.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.73.0","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.73.0","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]},{"id":"CVE-2026-85731","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.5.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-m37j-52j7-pjw7"]},{"id":"GHSA-8wfp-579w-6r25","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]},{"id":"GHSA-fmqp-4wfc-w3v7","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"1.16.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]},{"id":"GHSA-hrxh-6v49-42gf","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.73.0","fixed":"1.82.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]},{"id":"GHSA-qr4g-8hrp-c4rw","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.15.3+dirty","fixed":"-","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]}]},"n4k":{"registry":"ghcr.io/nirmata","tag":"v1.15.2-n4k.nirmata.14","published_at":"2026-08-05T18:12:45Z","images":[{"name":"kyverno","ref":"ghcr.io/nirmata/kyverno:v1.15.2-n4k.nirmata.14","digest":"sha256:9a9d0564056299247300102dac5c35b77fae228b2c153b4fb7bb23263b509ce0","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyvernopre","ref":"ghcr.io/nirmata/kyvernopre:v1.15.2-n4k.nirmata.14","digest":"sha256:a93293fef34fdb1f87fb1c41bd2ae478ae2624721e8a2e5c4aa789e56cb3d632","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"background-controller","ref":"ghcr.io/nirmata/background-controller:v1.15.2-n4k.nirmata.14","digest":"sha256:efc21978a2b57671bcb7e1685e087c0e2e5cd24efff9ea5c68903f2818ea65f0","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"cleanup-controller","ref":"ghcr.io/nirmata/cleanup-controller:v1.15.2-n4k.nirmata.14","digest":"sha256:1df95bded38469f513220422a5c02cc80ea345f5944bb20d0e082151f993f13e","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"reports-controller","ref":"ghcr.io/nirmata/reports-controller:v1.15.2-n4k.nirmata.14","digest":"sha256:487100acd03d22501fd661965c359d151d13a0d3770dc4f4d1634dc46ba404af","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyverno-cli","ref":"ghcr.io/nirmata/kyverno-cli:v1.15.2-n4k.nirmata.14","digest":"sha256:349454158ca5739deba850e6e424353bcbf9ada25f7b61301cbbe3428c064d26","os":{"family":"alpine","name":"3.25.0_alpha20260805"}}],"counts":{"critical":0,"high":5,"total":5},"findings":[{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.82.1","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.82.1","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]}]}},{"series":"1.16","oss":{"registry":"ghcr.io/kyverno","tag":"v1.16.4","published_at":"2026-04-23T16:31:55Z","images":[{"name":"kyverno","ref":"ghcr.io/kyverno/kyverno:v1.16.4","digest":"sha256:36d00cadc94d75103ea06b55608ca12a3cea957382cb90232ad54404f31edc41","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"kyvernopre","ref":"ghcr.io/kyverno/kyvernopre:v1.16.4","digest":"sha256:e42573b727baba15ad5b910f154876cce9349b96b9ce967c821bd21c9ddd01b1","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"background-controller","ref":"ghcr.io/kyverno/background-controller:v1.16.4","digest":"sha256:2260e6533d8cfbc27f71def2cc68b1faa0351be7ce6717c79b80923443f1a827","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"cleanup-controller","ref":"ghcr.io/kyverno/cleanup-controller:v1.16.4","digest":"sha256:c997946c89d36654d83cb058e0de171207adea982c452e60bcbdddc21128cb0c","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"reports-controller","ref":"ghcr.io/kyverno/reports-controller:v1.16.4","digest":"sha256:f5a0485208a9815ce0d75adf525bba748460e9afe62348bb28f447f44e0f0848","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"kyverno-cli","ref":"ghcr.io/kyverno/kyverno-cli:v1.16.4","digest":"sha256:9a739dab480dd92c123d1271ff50f7b5ec0ce0d6e510161e86566c61b5852edd","os":{"family":"alpine","name":"3.24.0_alpha20260127"}}],"counts":{"critical":5,"high":48,"total":53},"findings":[{"id":"CVE-2026-25681","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27136","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27145","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5037"]},{"id":"CVE-2026-33811","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4981"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.53.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33818","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5972"]},{"id":"CVE-2026-39820","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4986"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39822","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.12, 1.26.5, 1.27.0-rc.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39828","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39829","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-w879-237q-wc7r"]},{"id":"CVE-2026-39830","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vgwf-h737-ff37"]},{"id":"CVE-2026-39831","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-89gr-r52h-f8rx"]},{"id":"CVE-2026-39832","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5wc-c3c7-36mc"]},{"id":"CVE-2026-39834","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GHSA-rm3j-f69w-wqmq"]},{"id":"CVE-2026-39835","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39836","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4971"]},{"id":"CVE-2026-40868","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.16.4+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-q93q-v844-jrqp"]},{"id":"CVE-2026-41068","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.16.4+dirty","fixed":"-","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-cvq5-hhx3-f99p"]},{"id":"CVE-2026-41323","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.16.4+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f9g8-6ppc-pqq4"]},{"id":"CVE-2026-42499","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4977"]},{"id":"CVE-2026-42504","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5038"]},{"id":"CVE-2026-42508","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-5cgq-3rg8-m6cv"]},{"id":"CVE-2026-44973","severity":"HIGH","pkg":"github.com/go-git/go-billy/v5","installed":"v5.8.0","fixed":"5.9.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-qw64-3x98-g7q2"]},{"id":"CVE-2026-45022","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.17.2","fixed":"5.19.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-389r-gv7p-r3rp"]},{"id":"CVE-2026-46595","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-46597","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-q4h4-gmj2-qvw2"]},{"id":"CVE-2026-46600","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.56.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-4789","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.16.4+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-rggm-jjmc-3394"]},{"id":"CVE-2026-48702","severity":"HIGH","pkg":"github.com/sigstore/rekor","installed":"v1.5.1","fixed":"1.5.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-47q9-m4ww-924m"]},{"id":"CVE-2026-49478","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.8.5","fixed":"1.8.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5mr-q85p-6hh6"]},{"id":"CVE-2026-50151","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-50163","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56852","severity":"HIGH","pkg":"golang.org/x/text","installed":"v0.35.0","fixed":"0.39.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5970"]},{"id":"CVE-2026-56853","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6089"]},{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-56858","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56859","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6088"]},{"id":"CVE-2026-56860","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56862","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6090"]},{"id":"CVE-2026-56864","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.33.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6180"]},{"id":"CVE-2026-56865","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.33.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6179"]},{"id":"CVE-2026-71556","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.17.2","fixed":"5.19.2","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hc8v-wwc9-vgxm"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]},{"id":"CVE-2026-85731","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-m37j-52j7-pjw7"]},{"id":"GHSA-8wfp-579w-6r25","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.16.4+dirty","fixed":"1.17.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]},{"id":"GHSA-hrxh-6v49-42gf","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.82.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]},{"id":"GHSA-qr4g-8hrp-c4rw","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.16.4+dirty","fixed":"-","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]}]},"n4k":{"registry":"ghcr.io/nirmata","tag":"v1.16.3-n4k.nirmata.16","published_at":"2026-08-05T18:12:45Z","images":[{"name":"kyverno","ref":"ghcr.io/nirmata/kyverno:v1.16.3-n4k.nirmata.16","digest":"sha256:96f713dff2aeaf6b48628362e15c1ef257b1d4ec43e6c0f9fe007d87d8611cb1","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyvernopre","ref":"ghcr.io/nirmata/kyvernopre:v1.16.3-n4k.nirmata.16","digest":"sha256:681e445864011410f525fc6f950348922266ac5602e803bc97ed753385fe75fb","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"background-controller","ref":"ghcr.io/nirmata/background-controller:v1.16.3-n4k.nirmata.16","digest":"sha256:fe41bf77d8c93f432ea9cada41dca59c02dedce99741ea25b79e0ff9e7cd3d27","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"cleanup-controller","ref":"ghcr.io/nirmata/cleanup-controller:v1.16.3-n4k.nirmata.16","digest":"sha256:2dbe3d95270d43eb269fca975a9662c3a2fd5550408f85f61a5e3b00cd73c6a3","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"reports-controller","ref":"ghcr.io/nirmata/reports-controller:v1.16.3-n4k.nirmata.16","digest":"sha256:466968785a75befbb23847d68d93ff55e74846e354a5617c847698f9b7d4133a","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyverno-cli","ref":"ghcr.io/nirmata/kyverno-cli:v1.16.3-n4k.nirmata.16","digest":"sha256:ef7519a5993921e0c93667eb51c1fcd77013e70ef773906b84e37d171975f484","os":{"family":"alpine","name":"3.25.0_alpha20260805"}}],"counts":{"critical":0,"high":5,"total":5},"findings":[{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.82.1","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.82.1","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]}]}},{"series":"1.17","oss":{"registry":"ghcr.io/kyverno","tag":"v1.17.2","published_at":"2026-04-23T15:12:09Z","images":[{"name":"kyverno","ref":"ghcr.io/kyverno/kyverno:v1.17.2","digest":"sha256:a20e4d80be913684b60346d7f1951a2907ebce80bb5cc34806558142ff8e6758","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"kyvernopre","ref":"ghcr.io/kyverno/kyvernopre:v1.17.2","digest":"sha256:814382e4f42e16798d0b122d2478f03cf6e76e193a35002b35cb84e49ad505dc","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"background-controller","ref":"ghcr.io/kyverno/background-controller:v1.17.2","digest":"sha256:673e547198f2c0bdca92c3b11d6a859d2ad66f61b5df54f04a966d77e0e0d3c5","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"cleanup-controller","ref":"ghcr.io/kyverno/cleanup-controller:v1.17.2","digest":"sha256:320f43b0ef1b0ee38d2631fc537158efe8b2fe4e9610ad0f967cb01c63ed24e6","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"reports-controller","ref":"ghcr.io/kyverno/reports-controller:v1.17.2","digest":"sha256:65f7f11cb4f47ae8181550af2d9f4651536bb1fb9fdd52cb4fb9976c0481d50c","os":{"family":"alpine","name":"3.24.0_alpha20260127"}},{"name":"kyverno-cli","ref":"ghcr.io/kyverno/kyverno-cli:v1.17.2","digest":"sha256:0a499cd588b4e4df6583f36f453030f6e7ce20d0f625e95487e38c4db57ef2ac","os":{"family":"alpine","name":"3.24.0_alpha20260127"}}],"counts":{"critical":5,"high":42,"total":47},"findings":[{"id":"CVE-2026-25681","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27136","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-27145","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5037"]},{"id":"CVE-2026-33811","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4981"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.53.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33814","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4918"]},{"id":"CVE-2026-33818","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5972"]},{"id":"CVE-2026-39820","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4986"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39822","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.12, 1.26.5, 1.27.0-rc.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39828","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39829","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-w879-237q-wc7r"]},{"id":"CVE-2026-39830","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vgwf-h737-ff37"]},{"id":"CVE-2026-39831","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-89gr-r52h-f8rx"]},{"id":"CVE-2026-39832","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5wc-c3c7-36mc"]},{"id":"CVE-2026-39834","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["grype"],"aliases":["GHSA-rm3j-f69w-wqmq"]},{"id":"CVE-2026-39835","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-39836","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4971"]},{"id":"CVE-2026-42499","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.10, 1.26.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-4977"]},{"id":"CVE-2026-42504","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.11, 1.26.4","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5038"]},{"id":"CVE-2026-42508","severity":"CRITICAL","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-5cgq-3rg8-m6cv"]},{"id":"CVE-2026-44973","severity":"HIGH","pkg":"github.com/go-git/go-billy/v5","installed":"v5.8.0","fixed":"5.9.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-qw64-3x98-g7q2"]},{"id":"CVE-2026-45022","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.17.2","fixed":"5.19.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-389r-gv7p-r3rp"]},{"id":"CVE-2026-46595","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-46597","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.52.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-q4h4-gmj2-qvw2"]},{"id":"CVE-2026-46600","severity":"HIGH","pkg":"golang.org/x/net","installed":"v0.52.0","fixed":"0.56.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-48702","severity":"HIGH","pkg":"github.com/sigstore/rekor","installed":"v1.5.0","fixed":"1.5.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-47q9-m4ww-924m"]},{"id":"CVE-2026-49478","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.8.5","fixed":"1.8.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5mr-q85p-6hh6"]},{"id":"CVE-2026-50151","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-50163","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56852","severity":"HIGH","pkg":"golang.org/x/text","installed":"v0.35.0","fixed":"0.39.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5970"]},{"id":"CVE-2026-56853","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6089"]},{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-56858","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56859","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6088"]},{"id":"CVE-2026-56860","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56862","severity":"HIGH","pkg":"stdlib","installed":"v1.25.9","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6090"]},{"id":"CVE-2026-56864","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.33.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6180"]},{"id":"CVE-2026-56865","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.33.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6179"]},{"id":"CVE-2026-71556","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.17.2","fixed":"5.19.2","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hc8v-wwc9-vgxm"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.49.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]},{"id":"CVE-2026-85731","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-m37j-52j7-pjw7"]},{"id":"GHSA-hrxh-6v49-42gf","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.82.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]}]},"n4k":{"registry":"ghcr.io/nirmata","tag":"v1.17.2-n4k.nirmata.21","published_at":"2026-08-05T18:12:45Z","images":[{"name":"kyverno","ref":"ghcr.io/nirmata/kyverno:v1.17.2-n4k.nirmata.21","digest":"sha256:ed69a8d1b69cf77f1399075875863fa7198803f998a0cb0a8b7a6aad159f61e3","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyvernopre","ref":"ghcr.io/nirmata/kyvernopre:v1.17.2-n4k.nirmata.21","digest":"sha256:214c0e6b95953da6ad1068cb00546b63327ded57101d24743ae043b53ed45476","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"background-controller","ref":"ghcr.io/nirmata/background-controller:v1.17.2-n4k.nirmata.21","digest":"sha256:eb003e9ff5ac07ea78adc806b616ddf007b594baa8e10f636f913c8084be6e75","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"cleanup-controller","ref":"ghcr.io/nirmata/cleanup-controller:v1.17.2-n4k.nirmata.21","digest":"sha256:d358d8d83ffaf87190df9d4816bfac6bdceaf154adc1c0b306932f5dea8736b4","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"reports-controller","ref":"ghcr.io/nirmata/reports-controller:v1.17.2-n4k.nirmata.21","digest":"sha256:fa75676020652df0f700d2bfaef6e5adbe53b25297508b279ea58a621c0e4fe8","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyverno-cli","ref":"ghcr.io/nirmata/kyverno-cli:v1.17.2-n4k.nirmata.21","digest":"sha256:7f9dcd7dfc8d3d111ca83f2f91c79687b7c43621c4bf47683c2e86badc2ee6a6","os":{"family":"alpine","name":"3.25.0_alpha20260805"}}],"counts":{"critical":0,"high":1,"total":1},"findings":[{"id":"CVE-2026-41485","severity":"HIGH","pkg":"github.com/kyverno/kyverno","installed":"v1.17.2-n4k.nirmata.21","fixed":"1.16.4, 1.17.2","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-fpjq-c37h-cqcv"]}]}},{"series":"1.18","oss":{"registry":"ghcr.io/kyverno","tag":"v1.18.2","published_at":"2026-07-10T02:34:27Z","images":[{"name":"kyverno","ref":"ghcr.io/kyverno/kyverno:v1.18.2","digest":"sha256:0a540e2ddf74d0d2d3d45f9ef248d7dbc96576accdbcc6a2dd7eaff9fea56504","os":{"family":"alpine","name":"3.24.0"}},{"name":"kyvernopre","ref":"ghcr.io/kyverno/kyvernopre:v1.18.2","digest":"sha256:cd8cb4a31d25b3992734fb8f24a90ef691c90ce49338c89bea96792160eacb98","os":{"family":"alpine","name":"3.24.0"}},{"name":"background-controller","ref":"ghcr.io/kyverno/background-controller:v1.18.2","digest":"sha256:d62566ce41bd0d4a32bf2cf44b9ebfc02c36374f821f83070890287f62f68671","os":{"family":"alpine","name":"3.24.0"}},{"name":"cleanup-controller","ref":"ghcr.io/kyverno/cleanup-controller:v1.18.2","digest":"sha256:b0395d29ae332276e6910eb40418be9bc127c068d659f90aa1bcddd6be99ccb4","os":{"family":"alpine","name":"3.24.0"}},{"name":"reports-controller","ref":"ghcr.io/kyverno/reports-controller:v1.18.2","digest":"sha256:f09cf305170014e191b94e1c54f5be73163d8824eefad49349675c4efe43159a","os":{"family":"alpine","name":"3.24.0"}},{"name":"kyverno-cli","ref":"ghcr.io/kyverno/kyverno-cli:v1.18.2","digest":"sha256:7224ed05508c24419c3df98114c28ba682ad0a940dcdb7b9fdba0a4b6bf943cf","os":{"family":"alpine","name":"3.24.0"}}],"counts":{"critical":0,"high":25,"total":25},"findings":[{"id":"CVE-2026-33818","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5972"]},{"id":"CVE-2026-39821","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5026"]},{"id":"CVE-2026-39822","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.12, 1.26.5, 1.27.0-rc.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-44973","severity":"HIGH","pkg":"github.com/go-git/go-billy/v5","installed":"v5.8.0","fixed":"5.9.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-qw64-3x98-g7q2"]},{"id":"CVE-2026-45022","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.18.0","fixed":"5.19.0","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-389r-gv7p-r3rp"]},{"id":"CVE-2026-46600","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5942"]},{"id":"CVE-2026-49478","severity":"HIGH","pkg":"github.com/sigstore/fulcio","installed":"v1.8.5","fixed":"1.8.6","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-f5mr-q85p-6hh6"]},{"id":"CVE-2026-50151","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-50163","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56852","severity":"HIGH","pkg":"golang.org/x/text","installed":"v0.38.0","fixed":"0.39.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-5970"]},{"id":"CVE-2026-56853","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6089"]},{"id":"CVE-2026-56854","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.55.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-56858","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56859","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6088"]},{"id":"CVE-2026-56860","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy"]},{"id":"CVE-2026-56862","severity":"HIGH","pkg":"stdlib","installed":"v1.26.4","fixed":"1.25.13, 1.26.6, 1.27.0-rc.3","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6090"]},{"id":"CVE-2026-56864","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.36.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6180"]},{"id":"CVE-2026-56865","severity":"HIGH","pkg":"golang.org/x/mod","installed":"v0.36.0","fixed":"0.40.0","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GO-2026-6179"]},{"id":"CVE-2026-71556","severity":"HIGH","pkg":"github.com/go-git/go-git/v5","installed":"v5.18.0","fixed":"5.19.2","images":["kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-hc8v-wwc9-vgxm"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.53.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]},{"id":"CVE-2026-84304","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.83.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-vp52-pcj8-j9qc"]},{"id":"CVE-2026-84445","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.82.2, 1.83.2, 1.84.0-dev.0.20260825144003-d5a41119e0e3, 1.85.0-dev.0.20260825072537-93e31b48545e","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-2v4p-qf9q-27wj"]},{"id":"CVE-2026-85731","severity":"HIGH","pkg":"oras.land/oras-go/v2","installed":"v2.6.0","fixed":"2.6.2","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"],"aliases":["GHSA-m37j-52j7-pjw7"]},{"id":"GHSA-hrxh-6v49-42gf","severity":"HIGH","pkg":"google.golang.org/grpc","installed":"v1.80.0","fixed":"1.82.1","images":["kyverno","kyvernopre","background-controller","cleanup-controller","reports-controller","kyverno-cli"],"scanners":["trivy","grype"]}]},"n4k":{"registry":"ghcr.io/nirmata","tag":"v1.18.0-n4k.nirmata.6","published_at":"2026-08-05T18:12:45Z","images":[{"name":"kyverno","ref":"ghcr.io/nirmata/kyverno:v1.18.0-n4k.nirmata.6","digest":"sha256:2cc68fccfcca8dee704e44bdfd77085864433dfc9e334020df203cbccb85c564","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyvernopre","ref":"ghcr.io/nirmata/kyvernopre:v1.18.0-n4k.nirmata.6","digest":"sha256:948dccf250d6f0fbaf76099ffe2cb40b6b89e363b765da3ed9feb34e8edc4cb5","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"background-controller","ref":"ghcr.io/nirmata/background-controller:v1.18.0-n4k.nirmata.6","digest":"sha256:73c436a03ffd44fa0eb4606c4bf7626a33248239989970b103680db87a8ba9fb","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"cleanup-controller","ref":"ghcr.io/nirmata/cleanup-controller:v1.18.0-n4k.nirmata.6","digest":"sha256:a09bcd2cf75f86197af777eeb4203f797477478288ea236a844c85ef0293712b","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"reports-controller","ref":"ghcr.io/nirmata/reports-controller:v1.18.0-n4k.nirmata.6","digest":"sha256:95510bcc72d912af91bdf3ccf055304669369c73dd1818530383739136ffd641","os":{"family":"alpine","name":"3.25.0_alpha20260805"}},{"name":"kyverno-cli","ref":"ghcr.io/nirmata/kyverno-cli:v1.18.0-n4k.nirmata.6","digest":"sha256:db86d16ac0deeae55ccc8b2f0f37636c88fa69fde38891bac731bfdd1c8f503d","os":{"family":"alpine","name":"3.25.0_alpha20260805"}}],"counts":{"critical":0,"high":2,"total":2},"findings":[{"id":"CVE-2026-56855","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.55.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6355"]},{"id":"CVE-2026-78662","severity":"HIGH","pkg":"golang.org/x/crypto","installed":"v0.55.0","fixed":"0.56.0","images":["kyverno-cli"],"scanners":["grype"],"aliases":["GO-2026-6354"]}]}}],"fingerprint":"sha256:3e04d200b59d3ce694d1984c55893ceef7e30cb4973d995f19f19fae9a99a9bd"}