Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-resolvers-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462 · GHSA-2HW4-C9M4-F2FJ
Version ranges need review.
knative.dev/pkg
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10
Go
Red Hat
Medium
Fix reported
2026-11-06
Distrust compromised intermediate certificates in crypto/x509
CVE-2026-111943 · GO-2026-6809
rustls-webpki
webpki-root-certs
Rust / Cargo
Go
Red Hat
High
Fix reported
2026-10-29
Excessive CPU consumption from repeated initial window changes in net/http
CVE-2026-78669 · GO-2026-6611
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
CVE-2026-84304 · GHSA-VP52-PCJ8-J9QC
Version ranges need review.
google.golang.org/grpc
OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9
Go
Red Hat
High
Fix reported
2026-09-15
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE
CVE-2026-40938 · GHSA-94JR-7PQP-XHCQ
Version ranges need review.
github.com/tektoncd/pipeline
OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621 · GHSA-PWHC-RPQ9-4C8W
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
CVE-2026-40924 · GHSA-M2CX-GPQF-QF74
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
CVE-2026-33022 · GHSA-CV4X-93XX-WGFJ
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
CVE-2025-8556 · GHSA-2X5J-VHC8-9CWM
Version ranges need review.
github.com/cloudflare/circl
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
Source-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh
CVE-2026-56854 · GO-2026-6303
golang.org/x/crypto
ExternalDNS Operator/edo/external-dns-rhel9
Go
Red Hat
High
Fix reported
2026-08-29
