Skip to main content
Version: v1.4.x

GHSA-2HW4-C9M4-F2FJ

CVE Details​

Visit the official vulnerability details page for GHSA-2HW4-C9M4-F2FJ to learn more.

Initial Publication​

10/28/2026

Last Update​

10/28/2026

Third Party Dependency​

knative.dev/pkg

NIST CVE Summary​

knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion

CVE Severity​

6.5

Our Official Summary​

Investigation is ongoing to determine how this vulnerability affects our products.

Status​

fixed

Affected Products & Versions​

VersionPaletteAIPaletteAI VerteX
1.4.2⚠️ Impacted⚠️ Impacted
1.3.2⚠️ Impacted⚠️ Impacted
1.2.2⚠️ Impacted⚠️ Impacted

Revision History​

No revisions available.