Skip to content
OpenAdvisories

Package · Go

github.com/tektoncd/pipeline

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.7
    CVE-2023-37264

    Pipelines do not validate child UIDs

    Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not validate child UIDs, which means that a user that has access to create TaskRuns can create their own Tasks that the Pipelin…

    tektoncd pipeline github.com/tektoncd/pipeline Go