Skip to content
OpenAdvisories

Package · Go

github.com/tektoncd/pipeline

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-40938

    Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

    Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver's revision parameter is passed directly as a positional argumen…

    tektoncd pipeline github.com/tektoncd/pipeline Go
  • High 7.7
    CVE-2026-40161

    Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

    Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the Tekton Pipelines git resolver in API mode sends the system-configured Git AP…

    tektoncd pipeline github.com/tektoncd/pipeline Go