CVE-2019-11254

score

<0.1

cvss

6.5

epss

3.2%

published

2020-04-01

kev added

—

first seen

2026-10-21

Kubernetes API Server versions 1.1-1.14, prior to 1.15.10, 1.16.7, and 1.17.3 contain a resource exhaustion caused by processing malicious YAML payloads, letting authorized users cause high CPU usage, exploit requires sending crafted YAML payloads.