Skip to content
OpenAdvisories

Package · Go

github.com/tektoncd/pipeline

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.6

    Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod

    Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathI…