CVE-2026-40923 Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check

[
  {
    "vendor": "tektoncd",
    "product": "pipeline",
    "versions": [
      {
        "version": ">= 1.0.0, < 1.0.2",
        "status": "affected"
      },
      {
        "version": ">= 1.2.0, < 1.3.4",
        "status": "affected"
      },
      {
        "version": ">= 1.4.0, < 1.6.2",
        "status": "affected"
      },
      {
        "version": ">= 1.7.0, < 1.9.3",
        "status": "affected"
      },
      {
        "version": ">= 1.10.0, < 1.11.1",
        "status": "affected"
      }
    ]
  }
]