Skip to content
OpenAdvisories

Vendor

knative

3 known vulnerabilities.

Products

pkg 1 func 1 serving 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-54462

    knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

    Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview through json.NewDecoder(io.T…

    knative pkg knative.dev/pkg Go
  • Medium 6.5
    CVE-2023-48713

    Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

    Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Servic…

    knative serving knative.dev/serving Go
  • Medium 6.1
    CVE-2022-41939

    Credential exposure when running third-party builders in knative/func

    knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious `l…

    knative func