blob: 792a620fbeea07f1a09ddc6031689dc6a25c2007 [file] [log] [blame]
id: GO-2023-1819
modules:
- module: github.com/kyverno/kyverno
versions:
- fixed: 1.10.0
vulnerable_at: 1.10.0-rc.1
summary: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno
cves:
- CVE-2023-34091
ghsas:
- GHSA-hq4m-4948-64cc
references:
- advisory: https://github.com/kyverno/kyverno/security/advisories/GHSA-hq4m-4948-64cc
- advisory: https://nvd.nist.gov/vuln/detail/CVE-2023-34091
- web: https://github.com/kyverno/kyverno/releases/tag/v1.10.0
source:
id: GHSA-hq4m-4948-64cc
created: 2024-08-20T11:46:46.895117-04:00
review_status: UNREVIEWED
unexcluded: EFFECTIVELY_PRIVATE