CVE-2026-40161 Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

[
  {
    "vendor": "tektoncd",
    "product": "pipeline",
    "versions": [
      {
        "version": ">= 1.0.0, < 1.0.2",
        "status": "affected"
      },
      {
        "version": ">= 1.2.0, < 1.3.4",
        "status": "affected"
      },
      {
        "version": ">= 1.4.0, < 1.6.2",
        "status": "affected"
      },
      {
        "version": ">= 1.7.0, < 1.9.3",
        "status": "affected"
      },
      {
        "version": ">= 1.10.0, < 1.11.1",
        "status": "affected"
      }
    ]
  }
]