CVE-2026-122314

Kyverno versions prior to 1.19.2 are vulnerable to a Denial of Service (DoS) due to an unchecked type assertion in the variable-substitution engine . An attacker capable of submitting resources can trigger a panic by providing resources with non-string fields referenced via {{- variable }} shallo...

EUVD-2026-117225

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...

PT-2026-137336

Kyverno before 1.19.2 contains an unchecked type assertion in its variable-substitution engine that allows users who can submit resources to crash the policy engine. Attackers can submit resources with non-string fields referenced by - variable shallow substitution in policies, causing a panic th...