Kyverno (1.11.0 to 1.19.1) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/kyverno-1.11.0-to-1.19.1/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioThu, 05 Nov 2026 04:27:57 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgKyverno: Unbounded decompression denial of service (CVE-2026-122322)https://feed.craftedsignal.io/briefs/2026-11-kyverno-oom-dos/Thu, 05 Nov 2026 04:27:57 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-kyverno-oom-dos/Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory.Kyverno versions 1.11.0 through 1.19.1 contain an unbounded decompression vulnerability in extractStatement. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding maxPayloadSize when decompressed, causing admission controller OOM kills and denial of service.

]]>mediumadvisory