CVE-2026-122323

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures can publish small gzip layers that...

CVE-2026-122323

Kyverno versions 1.11.0 before 1.19.2 are vulnerable to a memory exhaustion flaw in the FetchSignatureBlob component due to unbounded decompression. Attackers who control registry referrers or signatures can provide highly compressed Notary signature layers; these small gzip layers may decompress...

EUVD-2026-117233

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures can publish small gzip layers that...

PT-2026-137344

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in FetchSignatureBlob that allows attackers to exhaust memory by supplying highly compressed notary signature layers. Attackers who control registry referrers or signatures can publish small gzip layers that...