Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462 · GHSA-2HW4-C9M4-F2FJ
Version ranges need review.
knative.dev/pkg
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10
Go
Red Hat
Medium
Fix reported
2026-11-06
Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching
CVE-2026-25542 · GHSA-RMX9-2PP3-XHCR
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check
CVE-2026-40923 · GHSA-RX35-6RHX-7858
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL
CVE-2026-40161 · GHSA-WJXP-XRPV-XPFF
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-image-bundler-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE
CVE-2026-40938 · GHSA-94JR-7PQP-XHCQ
Version ranges need review.
github.com/tektoncd/pipeline
OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
CVE-2026-40924 · GHSA-M2CX-GPQF-QF74
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod
CVE-2026-33211 · GHSA-J5Q5-J9GM-2W5C
Version ranges need review.
github.com/tektoncd/pipeline
OpenShift Pipelines/openshift-pipelines/pipelines-cli-tkn-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
CVE-2026-33022 · GHSA-CV4X-93XX-WGFJ
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
