Go/github.com/kubewarden/kubewarden-controller CVE-2025-24376: unknown, EPSS 0.35%
KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller
Action: Upgrade github.com/kubewarden/kubewarden-controller to 1.21.0 or later.
go get github.com/kubewarden/kubewarden-controller@v1.21.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.7.0 | 1.21.0 | - |
Fixed versions
| 1.21.0 |
Sources
- osv: GO-2025-3434
- https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-fc89-jghx-8pvg
- https://nvd.nist.gov/vuln/detail/CVE-2025-24376
- https://github.com/kubewarden/kubewarden-controller/commit/8124039b5f0c955d0ee8c8ca12d4415282f02d2c
CVE-2025-24376 · published · modified · JSON