Threats tagged 'ghsa-x7j9-3gfw-cfg6'

Kyverno versions before 1.19.2 have an unchecked type assertion vulnerability in the buildStatementMap function. This flaw allows unauthenticated attackers to crash the policy engine by submitting crafted attestation statements. Specifically, attackers can push an OCI referrer manifest containing a non-string type field, which can bypass image verification when failurePolicy is set to Ignore or cause a crash-loop in the reports-controller.