EOL Releases

v1.12.6-n4k.nirmata.5

Enterprise Kyverno 1.12 reached End of Support on January 24, 2026.

CVE Fixes

• Fixed High CVEs (2025-22874 , 2025-26569)
• Fixed Medium CVEs (2025-0913, 2025-4673)

N4K-only Improvements (v1.12.6-n4k.nirmata.1)

• [Feature] Remove cleanup cronjobs for updateRequests and ephemeralReports #10694
• [Feature] Remove wildcard permissions in Kyverno #10785

For a complete list of all the changes, refer to the GitHub release page.

v1.11.4-n4k.nirmata.6

The major improvements in this version are listed below. For a complete list of all changes made in Kyverno v1.11.0, refer to its GitHub release page.

• Optimization of JSON context using in-memory map (#79)
• Interpreter once created can be reused across searches (#79)
• Configured operations in webhooks dynamically based on policy rules
• Allows disabling of automatic webhook generation

v1.10.7-n4k.nirmata.11

The major improvements in this version are listed below. For a complete list of all changes made in Kyverno v1.10.0, refer to its GitHub release page.

• Skipping of other checks if there is a mismatch in operations (#23)
• Interpreter added for reuse of JMESPath (#24)
• Optimization of JSON context using in-memory map (#25)
• Configured operations in webhooks dynamically based on policy rules
• Admission reports can have labels beyond 63 characters
• Provides the option to selectively install components
• Allows disabling of automatic webhook generation
• SBOM generation is made optional