CVE-2026-25542 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-chains-fips, tkn-fips, tekton-chains, tkn, tekton-pipelines...

CVE-2026-25542 Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.43.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, trusted resources verification policies match a resource source string refSource.URI against spec.resources.pattern...