Skip to content
OpenAdvisories

Package · Go

knative.dev/pkg

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-54462

    knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

    Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoder(io.T…

    knative pkg knative.dev/pkg Go