Threats tagged 'ghsa-rwg8-pmp2-gw36'

Kyverno versions before 1.19.2 have a vulnerability in the variable-substitution engine where an unchecked type assertion can cause the policy engine to crash. This occurs when users submit resources with non-string fields referenced by shallow substitution in policies, leading to a panic. The resulting crash causes webhook denial of service and may allow policy bypass if failurePolicy is set to Ignore.