Kyverno before v1.13.4 SSRF via Service Call

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-15613 · Microsoft / collected KEV context

EUVD-2025-210816

GHSA-8g8h-v9pm-r6xg

GHSA-459x-q9hg-4gpq

BIT-kyverno-2025-15613

GO-2025-3615

cve-program · CVE-2025-15613

• https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq
• https://www.vulncheck.com/advisories/kyverno-before-1.13.4-ssrf-via-service-call

euvd · EUVD-2025-210816

• https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq
• https://www.vulncheck.com/advisories/kyverno-before-1.13.4-ssrf-via-service-call

nvd · CVE-2025-15613

• https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq
• https://www.vulncheck.com/advisories/kyverno-before-1.13.4-ssrf-via-service-call

osv · GHSA-459x-q9hg-4gpq

• https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq
• https://github.com/kyverno/kyverno
• https://pkg.go.dev/vuln/GO-2025-3615

osv · GO-2025-3615

• https://github.com/kyverno/kyverno/security/advisories/GHSA-459x-q9hg-4gpq

No related operational record is retained in the current change model.