CVE-2026-122309

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and memory by submitting CEL expressions evaluated without runtime cost limits. Attackers can create a NamespacedValidatingPolicy or NamespacedDeletingPolicy with nested map...

EUVD-2026-117220

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and memory by submitting CEL expressions evaluated without runtime cost limits. Attackers can create a NamespacedValidatingPolicy or NamespacedDeletingPolicy with nested map...

CVE-2026-122309

Kyverno versions before 1.19.2 are vulnerable to a Denial of Service (DoS) flaw caused by unbounded CEL policy evaluation costs . Specifically, namespace-scoped policy authors can exhaust CPU and memory by submitting CEL expressions that lack runtime cost limits. An attacker can exploit this by c...

PT-2026-137331

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and memory by submitting CEL expressions evaluated without runtime cost limits. Attackers can create a NamespacedValidatingPolicy or NamespacedDeletingPolicy with nested map...