Threats Tagged 'ghsa-q5v3-pp68-6crj'
View all threats tagged with 'ghsa-q5v3-pp68-6crj'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-q5v3-pp68-6crj'
Click on any threat for detailed analysis and mitigation recommendations
Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. (CVE-2026-84199)CVE-2026-84199 0 Kyverno before 1.16.2 contains a server-side request forgery (SSRF) vulnerability in the APICall feature. The URL field in a Policy's ServiceCall configuration is not validated, so a user with namespace-level Policy creation permissions can direct Kyverno to make HTTP requests to arbitrary internal resources (e.g., cloud metadata endpoints such as 169.254.169.254 or other tenants' resources). Because Kyverno executes these requests using its cluster-wide high-privilege ServiceAccount (a Confused Deputy problem), the responses—potentially including other tenants' secrets and cloud IAM credentials—are returned in the PolicyReport and can be read by the attacker, breaking multi-tenant isolation. Join the discussion | GCVE Database | 09/01/2026, 12:31:51 UTC Added: 09/01/2026, 15:45:11 UTC |
Showing 1 to 1 of 1 result