knative

Products

ProductCVEsExploitedLatest
func1–Nov 19, 2022
pkg1–Oct 27, 2026
serving1–Nov 28, 2023

Exploited and recent CVEs

  • CVE-2026-54462 Medium 6.5 knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion 0.4%
  • CVE-2023-48713 Medium 6.5 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler 0.9%
  • CVE-2022-41939 Medium 6.1 Credential exposure when running third-party builders in knative/func 1.0%