| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/kyverno/kyverno | ≥ 1.8.3, < 1.8.5 | 1.8.5 |
| kyverno | = 1.8.3= 1.8.4 |
Users of Kyverno on versions 1.8.3 or 1.8.4 who use verifyImages rules to verify container image signatures, and do not prevent use of unknown registries.
This issue has been fixed in version 1.8.5
Configure a Kyverno policy to restrict registries to a set of secure trusted image registries (sample).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free