Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Pipelines/openshift-pipelines/pipelines-nop-rhel9
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE
CVE-2026-40938 · GHSA-94JR-7PQP-XHCQ
Version ranges need review.
github.com/tektoncd/pipeline
OpenShift Pipelines/openshift-pipelines/pipelines-chains-controller-rhel9
Go
Red Hat
High
Fix reported
2026-09-10
containerd CRI server: Host memory exhaustion through Attach goroutine leak
CVE-2025-64329 · GHSA-M6HQ-P25P-FFR2
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
Medium
Fix reported
2026-09-10
containerd affected by a local privilege escalation via wide permissions on CRI directory
CVE-2024-25621 · GHSA-PWHC-RPQ9-4C8W
Version ranges need review.
github.com/containerd/containerd/v2
github.com/containerd/containerd
Go
Red Hat
High
Fix reported
2026-09-10
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
CVE-2026-40924 · GHSA-M2CX-GPQF-QF74
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
Path traversal in Tekton Pipelines git resolver allows reading arbitrary files from the resolver pod
CVE-2026-33211 · GHSA-J5Q5-J9GM-2W5C
Version ranges need review.
github.com/tektoncd/pipeline
OpenShift Pipelines/openshift-pipelines/pipelines-cli-tkn-rhel9
Go
Red Hat
Critical
Fix reported
2026-09-10
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun
CVE-2026-33022 · GHSA-CV4X-93XX-WGFJ
Version ranges need review.
github.com/tektoncd/pipeline
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-10
CIRCL-Fourq: Missing and wrong validation can lead to incorrect results
CVE-2025-8556 · GHSA-2X5J-VHC8-9CWM
Version ranges need review.
github.com/cloudflare/circl
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9
Go
Red Hat
Low
Fix reported
2026-09-10
