{"id":"GO-2026-5371","revision":"2b6cebb56c8640fa87d39390e58d8951","records":[{"revision":"2b6cebb56c8640fa87d39390e58d8951","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2026-5371","aliases":["BIT-kyverno-2026-84199","CVE-2026-84199","GHSA-fmqp-4wfc-w3v7"],"title":"Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno","description":"Kyverno APICall SSRF Vulnerability Leading to Multi-Tenant Isolation Breach in github.com/kyverno/kyverno","state":0,"publishedAt":"2026-06-25T18:43:19+00:00","modifiedAt":"2026-10-14T11:11:05.3463569+00:00","affected":[{"ecosystem":"Go","name":"github.com/kyverno/kyverno","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.16.2"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/kyverno/kyverno/security/advisories/GHSA-fmqp-4wfc-w3v7"],"sourceUrl":"https://osv.dev/vulnerability/GO-2026-5371","license":"OSV · upstream source license applies","key":"osv:GO-2026-5371","identifiers":["GO-2026-5371","BIT-kyverno-2026-84199","CVE-2026-84199","GHSA-fmqp-4wfc-w3v7"]},"retained":false,"historicalAffected":[]}],"coverage":[]}