Scumfrog

**Name of the Vulnerable Software and Affected Versions** Kyverno versions prior to 1.16.4 **Description** In apiCall service mode, the admission controller automatically attaches its ServiceAccount token to outbound HTTP requests when explicit authorization headers are absent. This allows an attacker to exfiltrate the token by directing apiCall requests to external or attacker-controlled endpoints, potentially granting full control over cluster resources and Kyverno policies. **Recommendations** Update to version 1.16.4 or later.

**Name of the Vulnerable Software and Affected Versions** Kyverno versions prior to 1.18.0 **Description** An issue exists where authenticated users can perform server-side request forgery (SSRF)—a technique used to induce a server to make requests to an unintended location—by injecting user-controlled input through variable substitution in the `apiCall.service.url` parameter. This allows attackers to target loopback addresses, cloud metadata endpoints, and internal services. Because response data is reflected in admission error messages, non-blind data exfiltration is possible. **Recommendations** Update to version 1.18.0 or later. Restrict the use of the `apiCall.service.url` parameter to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** node-tar versions 7.5.7 and below node-tar version 7.5.8 **Description** The node-tar package contains a flaw where an attacker-controlled archive, when extracted using default options, can create a hardlink inside the extraction directory that points to a file outside the extraction root. This allows for arbitrary file read and write access as the user performing the extraction. The issue arises because path protections are bypassed, effectively turning archive extraction into a direct filesystem access operation. The bypass chain involves the use of symlinks and a hardlink to achieve this. Specifically, the vulnerability stems from string-based linkpath checks that do not resolve symlinks on disk, combined with how hardlink targets are resolved and the placement of parent directory safety checks. A proof-of-concept demonstrates the ability to read and write to files outside the intended extraction directory. **Recommendations** Versions prior to 7.5.8 should be updated to version 7.5.8 or later.