CVE-2026-122306

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. Attackers can create a Policy with crafted match and exclude names evaluated by ValidateMatchExcludeConflict,...

EUVD-2026-117217

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. Attackers can create a Policy with crafted match and exclude names evaluated by ValidateMatchExcludeConflict,...

CVE-2026-122306

Kyverno versions before 1.19.2 are vulnerable to a Denial of Service attack due to Inefficient Algorithmic Complexity (CWE-407) during wildcard matching. Namespaced policy authors can exhaust the admission controller's CPU by submitting pathological wildcard patterns . Specifically, crafting a Po...

PT-2026-137328

Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespaced policy authors to exhaust admission controller CPU by submitting pathological wildcard patterns. Attackers can create a Policy with crafted match and exclude names evaluated by ValidateMatchExcludeConflict,...