{"id":"GO-2026-6880","summary":"Admission webhooks allow unbounded request-body memory exhaustion in knative.dev/pkg","details":"Admission webhooks allow unbounded request-body memory exhaustion in knative.dev/pkg","aliases":["CVE-2026-54462","GHSA-2hw4-c9m4-f2fj"],"modified":"2026-11-05T23:25:48.646155599Z","published":"2026-11-05T22:54:40Z","database_specific":{"review_status":"REVIEWED","url":"https://pkg.go.dev/vuln/GO-2026-6880"},"references":[{"type":"ADVISORY","url":"https://github.com/knative/pkg/security/advisories/GHSA-2hw4-c9m4-f2fj"},{"type":"FIX","url":"https://github.com/knative/pkg/commit/52dbd5ece63fe6d2d340ecbebec160550f460818"},{"type":"FIX","url":"https://github.com/knative/pkg/pull/3363"}],"affected":[{"package":{"name":"knative.dev/pkg","ecosystem":"Go","purl":"pkg:golang/knative.dev/pkg"},"ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.0.0-20260531000007-52dbd5ece63f"}]}],"ecosystem_specific":{"imports":[{"path":"knative.dev/pkg/webhook","symbols":["Webhook.Run","Webhook.ServeHTTP","routeLabeler.ServeHTTP"]}]},"database_specific":{"source":"https://vuln.go.dev/ID/GO-2026-6880.json"}}],"schema_version":"1.9.2"}