—Go
GO-2026-5716· CVE-2026-42541, GHSA-wqcw-g35j-j578Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call in github.com/kubewarden/kubewarden-controller
Modified: 6/25/2026
package
Go/github.com/kubewarden/kubewarden-controller
pkg:go/github.com/kubewarden/kubewarden-controller
MEDIUM4.3Go
GHSA-6r7f-3fwq-hq74· CVE-2026-29773, GO-2026-4652Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding
Modified: 3/23/2026
MEDIUM4.3Go
GHSA-756x-m4mj-q96c· CVE-2025-24784, GO-2025-3435Kubewarden-Controller information leak via AdmissionPolicyGroup Resource
Modified: 2/5/2025
MEDIUM6.5Go
GHSA-fc89-jghx-8pvg· CVE-2025-24376, GO-2025-3434KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources
Modified: 2/5/2025
MEDIUM4.3Go
GHSA-wqcw-g35j-j578· CVE-2026-42541, GO-2026-5716Kubewarden vulnerable to RBAC Reconnaissance via unchecked can_i host capability call
Modified: 6/25/2026
—Go
GO-2025-3434· CVE-2025-24376, GHSA-fc89-jghx-8pvgKubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller
Modified: 3/3/2026
—Go
GO-2025-3435· CVE-2025-24784, GHSA-756x-m4mj-q96cKubewarden-Controller information leak via AdmissionPolicyGroup Resource in github.com/kubewarden/kubewarden-controller
Modified: 3/3/2026
—Go
GO-2026-4652· CVE-2026-29773, GHSA-6r7f-3fwq-hq74Kubewarden: Cross-namespace data exfiltration via deprecated host callback binding in github.com/kubewarden/kubewarden-controller
Modified: 3/23/2026