pkg/policy/generate/validate.go vulnerabilities

Latest pkg/policy/generate/validate.go CVEs

Newest publication first

1. CVE-2026-124441 Kyverno before 1.19.2 Authorization Bypass via Variable Generate Target Kind

   Published 2026-11-08

   High·CVSS 8.7

   Kyverno before 1.19.2 contains an authorization bypass vulnerability that allows namespaced tenants to generate any resource kind in any namespace by templating the generate rule's kind and namespace with variables. Attackers can create a Policy and trigger ConfigMap in their own...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.