knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

影響: go:knative.dev/pkg < 0.0.0-20260531000007-52dbd5ece63f → 0.0.0-20260531000007-52dbd5ece63f

⚠️ Update (verification, 2026-05-19): C-2 confirmed end-to-end — 4.5× amplification observed (worse than the advisory's conservative 2× claim) Built a Go PoC ([cmd/poc-c2/main.go](https://github.com/knative/pkg/blob/1ad5a1ce0ee7043081cb50fd1acc6d36a9126844/cmd/poc-c2/main.go)) that runs the exact 8-line vulnerable snippet from [webhook/admission.go:109-117](https://github.com/knative/pkg/blob/1ad5a1ce0ee7043081cb50fd1acc6d36a9126844/webhook/admission.go#L109-L117) verbatim under the same http.H…

GitHub Advisory Database에서 읽기

2026. 10. 29. 오전 06:20, GitHub Advisory Database에서 "knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion"을(를) 게시했습니다 (유형: 취약점 권고). 심각도는 "보통"(medium)입니다. 관련 기술: Go, GitHub.