CVE-2026-122315

Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under...

EUVD-2026-117226

Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under...

CVE-2026-122315

Kyverno versions prior to 1.19.2 are vulnerable to a denial-of-service or verification bypass due to an unchecked type assertion in the buildStatementMap function. Unauthenticated attackers can exploit this by pushing an OCI referrer manifest containing a non-string type field within crafted atte...

PT-2026-137337

Kyverno before 1.19.2 contains an unchecked type assertion in buildStatementMap that allows unauthenticated attackers to crash the policy engine via crafted attestation statements. Attackers can push an OCI referrer manifest with a non-string type field to bypass image verification under...