Description
Skipper is an HTTP router and reverse proxy for service composition. Prior to 0.26.22, Handler in dataclients/kubernetes/admission/admission.go passes the body of requests to the Kubernetes admission endpoint at :9443/admission directly to io.ReadAll(r.Body) without a size limit. An attacker with in-cluster network access and a valid Kubernetes client certificate can send a very large body that causes unbounded memory allocation and an out-of-memory termination of the Skipper process. The disrup
Remediation
References
Related Vulnerabilities
WordPress Plugin Blue Wrench Video Widget Cross-Site Scripting (2.1.0)
PHP Resource Management Errors Vulnerability (CVE-2014-2497)
Oracle JRE CVE-2012-5077 Vulnerability (CVE-2012-5077)
WordPress Plugin OnePress Social Locker Multiple Unspecified Vulnerabilities (4.2.5)
Apache Tomcat Improper Handling of URL Encoding (Hex Encoding) Vulnerability (CVE-2026-59083)