Threats tagged 'ghsa-6gx2-rqm4-38f9'

CVE-2026-71469 is a vulnerability in the search-v2-api component where an unauthenticated attacker can send requests with unique random bearer tokens. Each unique token causes a permanent entry in an unbounded tokenReviews cache that is not properly cleared. This behavior can lead to memory exhaustion of the search-api pod, resulting in a Denial of Service (DoS) condition.