Known Vulnerabilities for Policy Controller by Sigstore
Listed below are 1 of the newest known vulnerabilities associated with "Policy Controller" by "Sigstore".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-93854 json | In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete oper... | Not Provided | 2026-09-18 | 2026-09-22 |
| CVE-2026-81920 json | Concrete CMS below 9.5.3 was vulnerable to Cross-Site Request Forgery in the dashboard SEO Excluded Words page. The reset() c... | Not Provided | 2026-09-15 | 2026-09-15 |
| CVE-2026-73318 json | XenForo before 2.3.13 contains a missing authorization vulnerability in the force-agreement controller that allows any ACP ad... | Not Provided | 2026-09-08 | 2026-09-14 |
| CVE-2026-72915 json | Mastodon is a free, open-source social network server based on ActivityPub. From 4.6.0-beta.1 until 4.6.4 and 4.7.0-beta.1, a... | Not Provided | 2026-08-10 | 2026-08-11 |
| CVE-2026-68535 json | Concrete CMS Area API's block-create endpoint in versions 9.2.0 to 9.5.2 did not invoke the block type controller's validate(... | Not Provided | 2026-09-11 | 2026-09-14 |
| CVE-2026-66793 json | A flaw was found in the governance-policy-addon-controller component of Red Hat Advanced Cluster Management for Kubernetes. A... | Not Provided | 2026-08-18 | 2026-08-27 |
| CVE-2026-65835 json | Capsule is a multi-tenancy and policy-based framework for Kubernetes. From 0.13.0 until 0.13.8, after the incomplete CVE-2026... | Not Provided | 2026-07-30 | 2026-07-31 |
| CVE-2026-55891 json | PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Prior to 2.0.5, Request::getRequestUri()... | Not Provided | 2026-08-28 | 2026-08-31 |
| CVE-2026-54523 json | Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMuta... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-54165 json | Dobase is an open-source, self-hosted workspace with installable tools. Versions prior to 2026.06.03 have a one-click stored ... | Not Provided | 2026-09-11 | 2026-09-14 |