https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-05T21:46:22.044256+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-122322 CVE-2026-122322 — Kyverno from 1.11.0 before 1.19.2 Memory Exhaustion via Notary Attestation Decompression 2026-11-05T21:46:22.046741+00:00

Affected: kyverno

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding maxPayloadSize when decompressed, causing admission controller OOM kills and denial of service.