{"action":"Upgrade github.com/kyverno/kyverno to 1.8.5 or later.","affected":[{"fixed":"1.8.5","introduced":"1.8.3"}],"component":"github.com/kyverno/kyverno","cve_ids":["CVE-2022-47633"],"ecosystem":"Go","epss":0.01047,"exploited":false,"fixed_versions":["1.8.5"],"ghsa_id":"GHSA-m3cq-xcx9-3gvm","id":"tcs_01M5KFF2SKMWH5EQE9EJQ6T6NA","modified_at":"2026-07-08T06:28:53.389187375Z","published_at":"2022-12-21T17:24:10Z","references":["https://osv.dev/vulnerability/GHSA-m3cq-xcx9-3gvm","https://github.com/kyverno/kyverno/security/advisories/GHSA-m3cq-xcx9-3gvm","https://nvd.nist.gov/vuln/detail/CVE-2022-47633","https://github.com/kyverno/kyverno/pull/5713","https://github.com/kyverno/kyverno","https://github.com/kyverno/kyverno/compare/v1.8.4...v1.8.5","https://github.com/kyverno/kyverno/releases/tag/v1.8.5","https://kyverno.io/docs/writing-policies/verify-images","https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries","https://pkg.go.dev/vuln/GO-2022-1180","https://web.archive.org/web/20230426095744/https://kyverno.io/policies/best-practices/restrict_image_registries/restrict_image_registries"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-m3cq-xcx9-3gvm","url":"https://osv.dev/vulnerability/GHSA-m3cq-xcx9-3gvm"}],"summary":"kyverno verifyImages rule bypass possible with malicious proxy/registry"}