Executive brief
Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno
Affected products
- Go github.com/kyverno/kyverno
Junglewise Threat Intelligence
CVE-2025-47281: GO-2025-3823 - Kyverno's Improper JMESPath Variable Evaluation Lead to Denial of Service in github.com/kyverno/kyverno
CVE-2025-47281 · Severity: low · CVSS 3.1 · Published 2025-07-29
Technologies: github.com/kyverno/kyverno (Go). Vendors: Go.
Related threats
- Kyverno APICall server-side request forgery (SSRF) via unvalidated URL
- Kyverno server-side request forgery via Service Calls
- Kyverno weak cipher suite support in TLS
- Kyverno is a policy engine designed for cloud native platform engineering teams. From 1.18.0 until 1.18.2, the NamespacedMutatingPolicy CEL
- Kyverno Controller Denial of Service via forEach Mutation Panic