| id: GO-2026-5374 | |
| modules: | |
| - module: github.com/kyverno/kyverno | |
| versions: | |
| - introduced: 1.13.0 | |
| - fixed: 1.16.4 | |
| - introduced: 1.17.0-rc.1 | |
| - fixed: 1.17.2 | |
| vulnerable_at: 1.17.2-rc.1 | |
| summary: Kyverno Controller Denial of Service via forEach Mutation Panic in github.com/kyverno/kyverno | |
| cves: | |
| - CVE-2026-41485 | |
| ghsas: | |
| - GHSA-fpjq-c37h-cqcv | |
| references: | |
| - advisory: https://github.com/kyverno/kyverno/security/advisories/GHSA-fpjq-c37h-cqcv | |
| - advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-41485 | |
| - fix: https://github.com/kyverno/kyverno/commit/76c8fdbe87328722e099e1fd44c3f21c9f7809cb | |
| - fix: https://github.com/kyverno/kyverno/commit/80e728c2283a0c65e5adb02d8a907106e6ebe7e3 | |
| source: | |
| id: GHSA-fpjq-c37h-cqcv | |
| created: 2026-06-25T02:55:48.261038217-04:00 | |
| review_status: UNREVIEWED |