Security
فارسی
All products

OpenShift Pipelines/openshift-pipelines/pipelines-triggers-webhook-rhel9

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionCVE-2026-54462 · GHSA-2HW4-C9M4-F2FJVersion ranges need review. knative.dev/pkgBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10 GoRed Hat Medium Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame FragmentationCVE-2026-84304 · GHSA-VP52-PCJ8-J9QCVersion ranges need review. google.golang.org/grpcOpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9 GoRed Hat High Fix reported
Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matchingCVE-2026-25542 · GHSA-RMX9-2PP3-XHCRVersion ranges need review. github.com/tektoncd/pipelineBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ checkCVE-2026-40923 · GHSA-RX35-6RHX-7858Version ranges need review. github.com/tektoncd/pipelineBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURLCVE-2026-40161 · GHSA-WJXP-XRPV-XPFFVersion ranges need review. github.com/tektoncd/pipelineBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-image-bundler-rhel9 GoRed Hat High Fix reported
Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCECVE-2026-40938 · GHSA-94JR-7PQP-XHCQVersion ranges need review. github.com/tektoncd/pipelineOpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9 GoRed Hat High Fix reported
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory ExhaustionCVE-2026-40924 · GHSA-M2CX-GPQF-QF74Version ranges need review. github.com/tektoncd/pipelineBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
gRPC-Go has an authorization bypass via missing leading slash in :pathCVE-2026-33186 · GHSA-P77J-4MVH-X3M3Version ranges need review. google.golang.org/grpcAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Critical Fix reported
Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver podCVE-2026-33211 · GHSA-J5Q5-J9GM-2W5CVersion ranges need review. github.com/tektoncd/pipelineOpenShift Pipelines/openshift-pipelines/pipelines-cli-tkn-rhel9 GoRed Hat Critical Fix reported
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRunCVE-2026-33022 · GHSA-CV4X-93XX-WGFJVersion ranges need review. github.com/tektoncd/pipelineBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Medium Fix reported
Logrus is vulnerable to DoS when using Entry.Writer()CVE-2025-65637 · GHSA-4F99-4Q7P-P3GHVersion ranges need review. github.com/sirupsen/logrusConfidential Compute Attestation/openshift-sandboxed-containers/osc-monitor-rhel9 GoRed Hat High Fix reported
Parsing an invalid SVCB or HTTPS RR can panic in golang.org/x/net/dns/dnsmessageCVE-2026-46600 · GO-2026-5942 golang.org/x/netstdlib GoRed Hat High Fix reported