CVE-2026-122322

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding...

EUVD-2026-117232

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding...

CVE-2026-122322

Kyverno versions 1.11.0 before 1.19.2 are vulnerable to a memory exhaustion flaw in the extractStatement function. This is caused by unbounded decompression of Notary attestation layers. A remote attacker controlling registry referrer artifacts can provide highly compressed gzip predicate layers ...

PT-2026-137343

Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding...