Threats tagged 'ghsa-867m-46wg-c2rf'

Kyverno versions prior to 1.19.2 have a denial of service vulnerability where namespaced policy authors can submit specially crafted wildcard patterns. This causes excessive CPU usage in the admission controller, leading to cluster-wide webhook timeouts that block resource operations.