Security fixes in kyverno-policy-reporter-kyverno-plugin-fips 1.5.2-r3 (CVE-2026-27139)
Affects kyverno-policy-reporter-kyverno-plugin-fipsSource GCVE Database
Not known to be exploited · CVSS 2.5 Low · fixed in 1.5.2-r3 : update kyverno-policy-reporter-kyverno-plugin-fips when convenient.
Data as of 10/25/2026, 04:40:12 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 1% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 1.5.2-r3
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartkyverno-policy-reporter-kyverno-plugin-fips | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
Users should upgrade to kyverno-policy-reporter-kyverno-plugin-fips version 1.5.2-r3 to apply the security fixes for CVE-2026-27139 and the other addressed vulnerabilities. Since a patch is available, applying this update is the recommended remediation step.
Description
The kyverno-policy-reporter-kyverno-plugin-fips package version 1.5.2-r3 addresses three security vulnerabilities including CVE-2026-27139. This release provides security fixes to mitigate these issues. No detailed technical information or CVSS scores are available for these vulnerabilities. There are no known exploits in the wild related to these vulnerabilities at this time.
Impact
The impact of CVE-2026-27139 and the associated vulnerabilities is not explicitly described in the available data. Without detailed information or CVSS scoring, the precise consequences of exploitation cannot be determined. There are no known active exploits in the wild, suggesting limited or no current exploitation activity.