GHSA-HQ4M-4948-64CC Kyverno resource with a deletionTimestamp may allow policy circumvention
Impact In versions of Kyverno prior to 1.10.0, resources which have the deletionTimestamp field defined can bypass validate, generate, or mutate-existing policies, even in cases where the validationFailureAction field is set to Enforce. This situation occurs as resources pending deletion were bei...