Kyverno: [policy-reporter-ui] XSS via Stored Property Values in PropertyCard Component

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-44245 · CVE overview and exploitation status

EUVD-2026-29880

GHSA-q98m-7w8c-w388

BIT-kyverno-2026-44245

GO-2026-5577

cve-program · CVE-2026-44245

• https://github.com/kyverno/kyverno/security/advisories/GHSA-q98m-7w8c-w388

euvd · EUVD-2026-29880

• https://github.com/kyverno/kyverno/security/advisories/GHSA-q98m-7w8c-w388

nvd · CVE-2026-44245

• https://github.com/kyverno/kyverno/security/advisories/GHSA-q98m-7w8c-w388

osv · GHSA-q98m-7w8c-w388

• https://github.com/kyverno/kyverno/security/advisories/GHSA-q98m-7w8c-w388
• https://nvd.nist.gov/vuln/detail/CVE-2026-44245
• https://github.com/kyverno/kyverno

osv · GO-2026-5577

• https://github.com/kyverno/kyverno/security/advisories/GHSA-q98m-7w8c-w388
• https://nvd.nist.gov/vuln/detail/CVE-2026-44245

• Kyverno is a policy engine designed for cloud native platform engineering teams. Prior to 2.5.2, Vue 3's v-html directive is the framework-documented mechanism for injecting raw HTML, and it intentionally disables the auto-escaping that {{ … · Advisory content revised · 15 Nov 2026