Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #6

Kyverno vulnerability lets policy authors trigger denial of service

Original: 🚨 EUVD-2026-117220 📊 Score: 8.2/10 (CVSS v3.1) 📦 Product: kyverno 🏢 Vendor: kyverno 📅 Updated: 2026-11-05 📝 Kyverno befo

A new vulnerability tracked as EUVD-2026-117220 has been recorded for Kyverno, the Kubernetes policy engine. Versions before 1.19.2 are affected: namespace-scoped policy authors can exhaust CPU and memory by submitting crafted CEL expressions, causing a denial of service. The flaw carries a CVSS v3.1 score of 8.2 out of 10, and the advisory was updated on 5 November 2026. Administrators are advised to review the advisory and update to a patched release.

Why now: Security teams are flagging a newly published high-severity flaw in a widely used Kubernetes policy tool.

KyvernoKubernetesEUVD-2026-117220

Open on mastodon →

Rank over time, top of the chart is #1. 2 snapshots from 1 d ago to 1 d ago.

Evidence

• 🚨 EUVD-2026-117220 📊 Score: 8.2/10 (CVSS v3.1) 📦 Product: kyverno 🏢 Vendor: kyverno 📅 Updated: 2026-11-05 📝 Kyverno before 1.19.2 contains a denial of service vulnerability that allows namespace-scoped policy authors to exhaust CPU and memory by submitting CEL expressions… · EUVD_Bot

API: https://socialmediatrends-api.osmike.com/v1/trends/4944836