HIGHCVSS v3.1 7.5Vulnerability
CVE-2026-122322
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding maxPayloadSize when decompressed, causing admission controller OOM kills and denial of service.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-05T05:51:13.658545+00:00
- Cvss severity
- HIGH
- Cvss score
- 7.5
- Retrieved at
- 2026-11-05T05:52:17+00:00
- Score
- 7.5
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-122322
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- First seen by Signal
- 2026-11-05T05:47:49+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Published at
- 2026-11-05T03:17:25.187
- Last modified
- 2026-11-05T03:17:25.187
Related Entities (1)
HAS_WEAKNESS (1)
Explore deeper with Ninja Signal's threat intelligence graph