github.com/kubewarden/kubewarden-controller
Manage admission policies in your Kubernetes cluster with ease
Activity
- Latest release
- 5d ago
- Total releases
- 65
- Cadence
- ~13 days
- Last 12 months
- 28
Reach
- Stars
- 237
Details
- First release
- Apr 10, 2021
| Version | Released | |
|---|---|---|
v1.38.0-rc.1
pre
|
v1.38.0-rc.1
pre
Dependencies (23)
+ 15 more |
|
v1.37.2
patch
|
v1.37.2
patch
Dependencies (23)
+ 15 more |
|
v1.37.1
patch
|
v1.37.1
patch
Dependencies (22)
+ 14 more |
|
v1.37.0
minor
|
v1.37.0
minor
Dependencies (22)
+ 14 more |
|
v1.37.0-rc.2
pre
|
v1.37.0-rc.2
pre
Dependencies (22)
+ 14 more |
|
v1.37.0-rc.1
pre
|
v1.37.0-rc.1
pre
Dependencies (22)
+ 14 more |
|
v1.37.0-alpha
pre
|
v1.37.0-alpha
pre
Dependencies (22)
+ 14 more |
|
v1.36.0
minor
|
v1.36.0
minor
Dependencies (21)
+ 13 more |
|
v1.36.0-rc3
pre
|
v1.36.0-rc3
pre
Dependencies (21)
+ 13 more |
|
v1.36.0-rc2
pre
|
v1.36.0-rc2
pre
Dependencies (21)
+ 13 more |
|
v1.36.0-rc1
pre
|
v1.36.0-rc1
pre
Dependencies (21)
+ 13 more |
|
v1.36.0-beta.1
pre
|
v1.36.0-beta.1
pre
Dependencies (21)
+ 13 more |
|
v1.36.0-alpha
pre
|
v1.36.0-alpha
pre
Dependencies (21)
+ 13 more |
|
v1.35.0
minor
|
v1.35.0
minor
Dependencies (21)
+ 13 more |
|
v1.34.2
patch
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.34.2
patch
Dependencies (21)
+ 13 more |
|
v1.34.1
minor
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.34.1
minor
Dependencies (21)
+ 13 more |
|
v1.34.0
minor
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.34.0
minor
Dependencies (21)
+ 13 more |
|
v1.34.0-rc2
pre
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.34.0-rc2
pre
Dependencies (21)
+ 13 more |
|
v1.34.0-rc1
pre
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.34.0-rc1
pre
Dependencies (21)
+ 13 more |
|
v1.33.1
patch
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.33.1
patch
Dependencies (21)
+ 13 more |
|
v1.33.0
minor
1 CVE
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev |
v1.33.0
minor
Dependencies (21)
+ 13 more |
|
v1.33.0-rc2
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.33.0-rc2
pre
Dependencies (21)
+ 13 more |
|
v1.33.0-rc1
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.33.0-rc1
pre
Dependencies (21)
+ 13 more |
|
v1.32.1
minor
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.32.1
minor
Dependencies (21)
+ 13 more |
|
v1.32.0-rc5
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.32.0-rc5
pre
Dependencies (21)
+ 13 more |
|
v1.32.0-rc4
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.32.0-rc4
pre
Dependencies (21)
+ 13 more |
|
v1.32.0-rc3
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.32.0-rc3
pre
Dependencies (21)
+ 13 more |
|
v1.32.0-rc1
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.32.0-rc1
pre
Dependencies (21)
+ 13 more |
|
v1.29.0
minor
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.29.0
minor
Dependencies (16)
+ 8 more |
|
v1.26.0
minor
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.26.0
minor
Dependencies (16)
+ 8 more |
|
v1.25.0-rc1
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.25.0-rc1
pre
Dependencies (16)
+ 8 more |
|
v1.24.0-rc1
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.24.0-rc1
pre
Dependencies (16)
+ 8 more |
|
v1.23.0
minor
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.23.0
minor
Dependencies (16)
+ 8 more |
|
v1.23.0-beta1
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.23.0-beta1
pre
Dependencies (16)
+ 8 more |
|
v1.22.0-rc1
pre
2 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev |
v1.22.0-rc1
pre
Dependencies (16)
+ 8 more |
|
v1.21.0-rc1
pre
4 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24784
GO-2025-3435
GHSA-756x-m4mj-q96c
Feb 04, 2025
Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.21.0-rc1
pre
Dependencies (16)
+ 8 more |
|
v1.18.0-beta1
pre
4 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24784
GO-2025-3435
GHSA-756x-m4mj-q96c
Feb 04, 2025
Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller Kubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.18.0-beta1
pre
Dependencies (16)
+ 8 more |
|
v1.16.0
minor
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.0
minor
Dependencies (15)
+ 7 more |
|
v1.16.0-rc2
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.16.0-rc2
pre
Dependencies (15)
+ 7 more |
|
v1.15.0
minor
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.15.0
minor
Dependencies (15)
+ 7 more |
|
v1.14.0-rc2
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.14.0-rc2
pre
Dependencies (15)
+ 7 more |
|
v1.14.0-rc1
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.14.0-rc1
pre
Dependencies (15)
+ 7 more |
|
v1.13.0
minor
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.13.0
minor
Dependencies (15)
+ 7 more |
|
v1.12.0-rc1
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.12.0-rc1
pre
Dependencies (15)
+ 7 more |
|
v1.11.1
minor
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.1
minor
Dependencies (15)
+ 7 more |
|
v1.11.0-rc6
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.0-rc6
pre
Dependencies (15)
+ 7 more |
|
v1.11.0-rc1
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.11.0-rc1
pre
Dependencies (15)
+ 7 more |
|
v1.10.1
minor
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.1
minor
Dependencies (14)
+ 6 more |
|
v1.10.0-rc2
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.0-rc2
pre
Dependencies (14)
+ 6 more |
|
v1.10.0-rc1
pre
3 CVEs
CVE-2026-42541
GO-2026-5716
GHSA-wqcw-g35j-j578
Jun 25, 2026
Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller Fixed in
1.35.0
References
Updated Jun 25, 2026 · Source: OSV.dev
CVE-2026-29773
GO-2026-4652
GHSA-6r7f-3fwq-hq74
Mar 11, 2026
Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller Fixed in
1.33.0
References
Updated Mar 23, 2026 · Source: OSV.dev
CVE-2025-24376
GO-2025-3434
GHSA-fc89-jghx-8pvg
Feb 04, 2025
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller Fixed in
1.21.0
References Updated Mar 03, 2026 · Source: OSV.dev |
v1.10.0-rc1
pre
Dependencies (14)
+ 6 more |