—

GO-2025-3434

KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller

Quick fix

GO-2025-3434 — github.com/kubewarden/kubewarden-controller: upgrade to the fixed version with the command below.

go get github.com/kubewarden/kubewarden-controller@v1.21.0

Details

KubeWarden's AdmissionPolicy and AdmissionPolicyGroup policies can be used to alter PolicyReport resources in github.com/kubewarden/kubewarden-controller

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/kubewarden/kubewarden-controller

Introduced in: 1.7.0Fixed in: 1.21.0

Fixgo get github.com/kubewarden/kubewarden-controller@v1.21.0

References

https://github.com/kubewarden/kubewarden-controller/security/advisories/GHSA-fc89-jghx-8pvg[ADVISORY]
https://nvd.nist.gov/vuln/detail/CVE-2025-24376[ADVISORY]
https://github.com/kubewarden/kubewarden-controller/commit/8124039b5f0c955d0ee8c8ca12d4415282f02d2c[FIX]