Go/github.com/kyverno/kyverno CVE-2022-47633: high 8.1, EPSS 1.05%
kyverno verifyImages rule bypass possible with malicious proxy/registry
Action: Upgrade github.com/kyverno/kyverno to 1.8.5 or later.
go get github.com/kyverno/kyverno@v1.8.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.3 | 1.8.5 | - |
Fixed versions
| 1.8.5 |
Sources
- osv: GHSA-m3cq-xcx9-3gvm
- https://github.com/kyverno/kyverno/security/advisories/GHSA-m3cq-xcx9-3gvm
- https://nvd.nist.gov/vuln/detail/CVE-2022-47633
- https://github.com/kyverno/kyverno/pull/5713
- https://github.com/kyverno/kyverno
- https://github.com/kyverno/kyverno/compare/v1.8.4...v1.8.5
- https://github.com/kyverno/kyverno/releases/tag/v1.8.5
- https://kyverno.io/docs/writing-policies/verify-images
- https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries
- https://pkg.go.dev/vuln/GO-2022-1180
- https://web.archive.org/web/20230426095744/https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries
CVE-2022-47633 · published · modified · JSON