A vulnerability in the Knative pkg common packages allows an attacker to send an oversized POST request to an admission webhook, causing excessive memory consumption and potential out-of-memory (OOM) termination of the controller pod. This affects all downstream consumers using the shared webhook server, including Knative, Tekton, KEDA, Sigstore policy-controller, and Kpack. The issue is fixed in version 0.0.0-20260531000007-52dbd5ece63f.