pkg vulnerabilities

CVEs whose affected-version data names the pkg package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-54462Medium· 6.5

yesterday

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

Knative pkg provides common packages shared across Knative repositories. Prior to 0.0.0-20260531000007-52dbd5ece63f, the knative.dev/pkg/webhook admissionHandler in webhook/admission.go decodes an attacker-supplied AdmissionReview throug…

▾ Sunlitknative · pkgvia CVEORG