Known Vulnerabilities for Policy Controller by Sigstore
Listed below are 1 of the newest known vulnerabilities associated with "Policy Controller" by "Sigstore".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-106440 json | Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna... | Not Provided | 2026-10-06 | 2026-10-09 |
| CVE-2026-104939 json | Description NGINX Ingress Controller has a vulnerability when implementing an externalAuth policy for ingress. NGINX Ingress ... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-100707 json | Kyverno before 1.19.1 contains a namespace isolation bypass in the apiCall context entry of namespaced Policy resources due t... | Not Provided | 2026-09-26 | 2026-09-28 |
| CVE-2026-100706 json | kyverno before 1.19.1 fails to properly validate URL-encoded path segments in Policy apiCall urlPath, allowing namespace tena... | Not Provided | 2026-09-26 | 2026-09-26 |
| CVE-2026-97901 json | In the Linux kernel, the following vulnerability has been resolved: genetlink: pin family module during policy dump The gen... | Not Provided | 2026-09-25 | 2026-10-21 |
| CVE-2026-94197 json | An authentication and authorization bypass vulnerability exists in F5 NGINX Kubernetes Ingress Controller (NIC) when configur... | Not Provided | 2026-10-14 | 2026-10-15 |
| CVE-2026-93860 json | In OpenStack Mistral through 23.0.0, the /v2/maintenance API controller clears the request context and calls the maintenance ... | Not Provided | 2026-10-08 | 2026-10-09 |
| CVE-2026-93854 json | In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete oper... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-84683 json | A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, proje... | Not Provided | 2026-09-23 | 2026-09-25 |
| CVE-2026-81920 json | Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset() c... | Not Provided | 2026-09-15 | 2026-09-15 |