knative serving vulnerabilities

Latest knative serving CVEs

Newest publication first

1. CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

   Published 2023-11-28

   Medium·CVSS 5.3

   Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler f...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.