CVE-2026-122323

A flaw was found in Kyverno. An attacker who controls container registry referrers or signatures can trigger a Denial of Service DoS by supplying specially crafted, highly compressed signature layers. When Kyverno decompresses these payloads, it fails to enforce size limits, resulting in memory...