CVE-2026-4789

ADVISORY - github

Summary

Kyverno, versions 1.16.0 and later, are vulnerable to SSRF due to unrestricted CEL HTTP functions.

EPSS Score⁠: 0.00005 (0.003)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-noinfo⁠

ADVISORY - github

CWE-918⁠

Server-Side Request Forgery (SSRF)

Impacted images

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.