CVE-2026-122305

Kyverno versions prior to 1.19.2 are vulnerable to a Denial of Service (DoS) flaw within the substituteVariablesIfAny function. The root cause is an unbounded substitution loop triggered by self-referential variable templates. A low-privileged attacker can exploit this by creating resources with ...