Go/knative.dev/serving CVE-2023-48713: medium 5.3, EPSS 0.87%

Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Action: Upgrade knative.dev/serving to 0.39.0 or later.

go get knative.dev/serving@v0.39.0

Affected

Fixed versions

Sources

• osv: GHSA-qmvj-4qr9-v547
• https://github.com/knative/serving/security/advisories/GHSA-qmvj-4qr9-v547
• https://nvd.nist.gov/vuln/detail/CVE-2023-48713
• https://github.com/knative/serving/commit/012ee2509231b80b7842139bfabc30516d3026ca
• https://github.com/knative/serving/commit/101f814112b9ca0767f457e7e616b46205551cf1
• https://github.com/knative/serving/commit/fff40ef7bac9be8380ec3d1c70fc15b57093382a
• https://github.com/knative/serving

CVE-2023-48713 · published 2023-11-27T23:27:04Z · modified 2026-09-10T03:49:59.069796292Z · JSON