Affected by GO-2025-3615 and 2 other vulnerabilities

GO-2025-3615: Kyverno vulnerable to SSRF via Service Calls in github.com/kyverno/kyverno

GO-2026-4381: Kyverno Cross-Namespace Privilege Escalation via Policy apiCall in github.com/kyverno/kyverno

GO-2026-4382: Kyverno Denial of Service via Context Variable Amplification in Policy Engine in github.com/kyverno/kyverno

resource

package

v1.14.2 Latest Latest Go to latest Published: Jun 2, 2025 License: Apache-2.0 Imports: 5 Imported by: 0

Details

This section is empty.

This section is empty.

This section is empty.

type OpenAPITypeResolver struct {
	// contains filtered or unexported fields
}

func NewOpenAPITypeResolver(client SchemaClient) *OpenAPITypeResolver

func (o *OpenAPITypeResolver) GetDeclProvier(gvk schema.GroupVersionKind, typeName string) (*cel.DeclTypeProvider, error)

type SchemaClient interface {
	ResolveSchema(gvk schema.GroupVersionKind) (*spec.Schema, error)
}