Threats tagged 'ghsa-6q83-2w37-78f6'

Kyverno versions prior to 1.19.2 have a denial-of-service vulnerability in the In and NotIn operators. This flaw allows attackers to crash the policy engine by submitting resources that cause a panic due to unchecked type assertions when JMESPath expressions evaluate to arrays containing integers, booleans, or mixed types. The crash disrupts admission control and policy enforcement.