GHSA-j8gc-gxpv-w8rgPublished
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-54462 · Microsoft / collected KEV context
cve-program · CVE-2026-54462
- https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj
- https://github.com/knative/pkg/pull/3363
- https://github.com/knative/pkg/commit/52dbd5ece63fe6d2d340ecbebec160550f460818
euvd · EUVD-2026-111135
- https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj
- https://github.com/knative/pkg/pull/3363
- https://github.com/knative/pkg/commit/52dbd5ece63fe6d2d340ecbebec160550f460818
nvd · CVE-2026-54462
- https://github.com/knative/pkg/commit/52dbd5ece63fe6d2d340ecbebec160550f460818
- https://github.com/knative/pkg/pull/3363
- https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj
osv · GHSA-2hw4-c9m4-f2fj
Related operational evidence
Explicit CVE identifiers- knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion · Newly collected advisory · 28 Oct 2026
- knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion · Newly collected advisory · 27 Oct 2026