Vulnerabilities

TI-2026-81393 CVE-2026-54462 · GHSA-j8gc-gxpv-w8rg

Memory exhaustion in Knative pkg admission webhook via request body

MEDIUM 62

Knative pkg provides common packages shared across Knative repositories.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00376 Published 2026-10-27 Partial fix · 0.0.0-20260531000007-52dbd5ece63f CWE-770

TI-2023-26552 CVE-2023-48713 · GHSA-qmvj-4qr9-v547

LOW 30

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00867 Published 2023-11-28 Fixed in 0.39.0 CWE-400

TI-2022-20280 CVE-2022-41939

HIGH 66

knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00993 Published 2022-11-19 Fixed in 1.8.1 CWE-200