CVE-2026-122322
HIGH
NVD
CVSS Score
7.5
Severity
HIGH
Published
Nov 05, 2026
Vendor
unknown
Description
Kyverno from 1.11.0 before 1.19.2 contains an unbounded decompression vulnerability in extractStatement that allows remote attackers to exhaust memory by supplying highly compressed attestation layers. Attackers controlling registry referrer artifacts can push gzip predicate layers exceeding maxPayloadSize when decompressed, causing admission controller OOM kills and denial of service.