CVE-2023-42815

CVE-2023-42815 is a denial-of-service vulnerability in Kyverno's Notary verifier, affecting users who built Kyverno from source at the main branch, specifically versions 1.11.0 and later. An attacker with control over the registry from which Kyverno fetches signatures could return a malicious response, causing Kyverno to crash and block admission requests. Rated Medium (CVSS 5.3), exploitation requires high attack complexity and user interaction, but could lead to high availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.