Insufficient Verification Of Data Authenticity

github.com/kyverno/kyverno is vulnerable to Insufficient Verification Of Data Authenticity. The vulnerability allows an attacker to control the digest of images used by Kyverno users. To exploit this issue, the attacker would need to compromise the registry from which Kyverno fetches its images. Once compromised, the attacker could provide a vulnerable image to the user and leverage it to further escalate their position or carry out additional attacks.