{"action":"Upgrade github.com/kyverno/kyverno to 1.17.0 or later.","affected":[{"fixed":"1.17.0","introduced":"0"}],"component":"github.com/kyverno/kyverno","cve_ids":["CVE-2026-41323"],"ecosystem":"Go","epss":0.00571,"exploited":false,"fixed_versions":["1.17.0"],"ghsa_id":"GHSA-f9g8-6ppc-pqq4","id":"tcs_01M5KF8T1S5AAMDR4HRQGZ89F4","modified_at":"2026-09-10T03:51:01.659888553Z","published_at":"2026-04-16T21:36:20Z","references":["https://osv.dev/vulnerability/GHSA-f9g8-6ppc-pqq4","https://github.com/kyverno/kyverno/security/advisories/GHSA-f9g8-6ppc-pqq4","https://nvd.nist.gov/vuln/detail/CVE-2026-41323","https://github.com/kyverno/kyverno/commit/bc4f91c4801b1eaa2edc0a14e2f1b0af8cf0c1f5","https://github.com/kyverno/kyverno/commit/c2eab00033e635bda4e4efb58c1b472b41728bb6","https://github.com/kyverno/kyverno/commit/f70e8ac1e7acd2e3844f9553e4a884f07f953de0","https://github.com/kyverno/kyverno"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-f9g8-6ppc-pqq4","url":"https://osv.dev/vulnerability/GHSA-f9g8-6ppc-pqq4"}],"summary":"Kyverno: ServiceAccount token leaked to external servers via apiCall service URL"}