CVE-2026-54247

Skipper (Zalando's HTTP router and reverse proxy) contains an unbounded memory allocation in its Kubernetes admission webhook handler (dataclients/kubernetes/admission/admission.go). The handler calls io.ReadAll(r.Body) without enforcing a size limit, so an attacker with in-cluster network access...