Kyverno ↗

Kyverno · Cloud / Policy

Track your version:Monitors Kyverno and tailors your dashboard to that exact version.

1.17.2 · latest cycle100/100 Healthy

Summary iPlain-English security verdict for Kyverno, generated from its current health score, actively-exploited vulnerabilities, and latest supported version.

Kyverno currently scores 100/100 — healthy. No tracked vulnerabilities are currently known to be exploited in the wild. The latest supported release is 1.17.2. It's on the latest patch with no significant known issues — keep it current.

Disclosure trend iNew CVEs published for Kyverno each year (NVD). A higher bar means more disclosures that year — more scrutiny, not necessarily less safe.

'19

'20

'21

'22

'23

'24

'25

'26

Patch priority — what to act on iThe issues to fix first — actively exploited (CISA KEV) first, then by exploitation probability (EPSS), then severity. Each row's "→ fixed in" is the earliest version that patches it; "see advisory" means no fixed version is published.

Most urgent first — actively exploited, then likeliest to be exploited.

CVE-2026-4789 CRITICAL Server-side request forgery (SSRF) EPSS 1% → see advisory CVE-2026-22039 CRITICAL Improper privilege management EPSS 1% → fixed in 1.16.3

See all 12 known Kyverno CVEs & security history →

Get alerted about Kyverno

Be emailed the moment Kyverno gets a newly exploited vulnerability (CISA KEV) or a release reaches end of life. Free · double opt-in · unsubscribe anytime.

We email only on real events for Kyverno — no marketing, no sharing, and we never know what you run. Track your whole stack →

Versions & lifecycle iWhen each release line stops receiving security patches (end-of-life). After EOL there are no more fixes — plan upgrades before these dates.

How long each Kyverno release line is supported — and when it sunsets. Select a line for its full report.

Feb2'26 Kyverno 1.14ended 2026-02-02

Nov10'25 Kyverno 1.13ended 2025-11-10

Jul31'25 Kyverno 1.12ended 2025-07-31

Apr25'25 Kyverno 1.11ended 2025-04-25

Oct29'24 Kyverno 1.10ended 2024-10-29

Apr26'24 Kyverno 1.9ended 2024-04-26

Nov10'23 Kyverno 1.8ended 2023-11-10

Full Kyverno end-of-life dates & support timeline →

1.17 latest 1.17.2 Supported 1.17.2 → 1.16 latest 1.16.4 Supported 1.16.4 → 1.15 latest 1.15.20 Supported 1.15.20 → 1.14 latest 1.14.5 End of life ended 2026-02-021.14.5 → 1.13 latest 1.13.6 End of life ended 2025-11-101.13.6 → 1.12 latest 1.12.7 End of life ended 2025-07-311.12.7 → 1.11 latest 1.11.5 End of life ended 2025-04-251.11.5 → 1.10 latest 1.10.7 End of life ended 2024-10-291.10.7 → 1.9 latest 1.9.5 End of life ended 2024-04-261.9.5 → 1.8 latest 1.8.5 End of life ended 2023-11-101.8.5 → See all upcoming end-of-life dates →

Frequently asked

Is Kyverno safe and patched?

What should I do about Kyverno now?

Upgrade Kyverno to the latest supported release (1.17.2) or later and apply available security updates, then confirm against Kyverno's official advisory.

When does Kyverno reach end-of-life?

The latest supported Kyverno release is 1.17.2. After end-of-life a release no longer receives security patches.

Which versions of Kyverno are still receiving security updates?

Supported Kyverno release lines (latest 1.17.2): 1.17, 1.16, 1.15. End-of-life releases no longer receive security patches.

Informational only, from public data (NVD · CISA KEV · EPSS · endoflife.date), and can lag or miss vendor-specific fixes. Always confirm against Kyverno's official advisory before you patch or upgrade — Kyverno official site ↗