7 matches found
CVE-2026-54462
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoderio.TeeReaderr.Body, &bodyBuffer under an...
CVE-2026-54462 knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoderio.TeeReaderr.Body, &bodyBuffer under an...
EUVD-2026-111135
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoderio.TeeReaderr.Body, &bodyBuffer under an...
CVE-2026-54462
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoderio.TeeReaderr.Body, &bodyBuffer under an...
CVE-2026-54462 knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoderio.TeeReaderr.Body, &bodyBuffer under an...
CVE-2026-54462
The knative.dev/pkg shared library is vulnerable to a memory exhaustion attack in its admission webhook handler (located in webhook/admission.go). Because the json.NewDecoder uses an io.TeeReader without an http.MaxBytesReader or equivalent body-size limit, a pod-network client can send an oversi...
PT-2026-126666
Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoderio.TeeReaderr.Body, &bodyBuffer under an...