GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: kube-state-metrics, istio, kubescape, azure-service-operator, tekton-pipelines, pulumi-kubernetes-operator, gitlab-kas, yunikorn-k8shim, hubble-ui, openbao, spicedb-operator, tkn, cluster-autoscaler, kube-metrics-adapter, kwok, fluent-operator, kapp-controller, ciliu...

GHSA-GCJH-H69Q-9W9G vulnerabilities

Vulnerabilities for packages: nginx-kubernetes-ingress-fips, beats-fips, cloud-provider-gcp-cloud-controller-manager-fips, kubernetes, argocd-image-updater, helm-operator-fips, rancher, kube-metrics-adapter-fips, livekit-cli, cloud-provider-aws-fips, openbao, gatekeeper-fips, karpenter,...

GHSA-HRXH-6V49-42GF vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-resourcegroups-fips, step-issuer-fips, step-kms-plugin, k6-fips, crossplane-provider-aws-mwaa-fips, trufflehog, splunk-otel-collector-fips, policy-controller-fips, livekit-server-fips, velero-plugin-for-microsoft-azure,...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: fscrypt, cloudbeat, kubernetes, argocd-image-updater, rancher, chisel, flux-fips, gatekeeper-fips, coder-fips, zarf-fips, trivy-operator-fips, drone, seaweedfs-rocksdb, traefik, terraform, frankenphp-8.5, minio-fips, seaweedfs-rocksdb-fips, knative-kafka-broker,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: fscrypt, kubernetes, rancher, gatekeeper-fips, traefik, terraform, frankenphp-8.5, teleport-operator-fips, knative-kafka-broker, gitlab-rails-ce, reports-server, knative-serving, k3s, kubernetes-dashboard, spire-server, opentofu, upwind-agent, external-dns, flux,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: fscrypt, cloudbeat, kubernetes, argocd-image-updater, mapotf-fips, flux-fips, gatekeeper-fips, splunk-otel-collector-fips, chezmoi, zarf-fips, trivy-operator-fips, pulumi-kubernetes-operator, terragrunt, traefik, apply-cve-bump, terraform, pulumi-language-yaml,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: fscrypt, kubernetes, rancher, gatekeeper-fips, traefik, terraform, frankenphp-8.5, teleport-operator-fips, knative-kafka-broker, gitlab-rails-ce, reports-server, knative-serving, k3s, kubernetes-dashboard, spire-server, opentofu, upwind-agent, external-dns, flux,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: fscrypt, step-issuer-fips, step-kms-plugin, cloudbeat, kubernetes, argocd-image-updater, mapotf-fips, rancher, flux-fips, openbao, gatekeeper-fips, chezmoi, zarf-fips, trivy-operator-fips, pulumi-kubernetes-operator, terragrunt, traefik, apply-cve-bump, terraform,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: fscrypt, cloudbeat, kubernetes, argocd-image-updater, mapotf-fips, rancher, chisel, flux-fips, rootlesskit-fips, gatekeeper-fips, coder-fips, longhorn-manager, chezmoi, splunk-otel-collector-fips, trivy-operator-fips, zarf-fips, drone, pulumi-kubernetes-operator,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: fscrypt, cloudbeat, kubernetes, argocd-image-updater, rancher, chisel, flux-fips, gatekeeper-fips, coder-fips, zarf-fips, trivy-operator-fips, drone, seaweedfs-rocksdb, traefik, terraform, frankenphp-8.5, minio-fips, seaweedfs-rocksdb-fips, knative-kafka-broker,...

GO-2026-5711 Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline...

GO-2026-5643 Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline...

GO-2026-5630 Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline...

GO-2026-5486 Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

CLEANSTART-2026-HU33730 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, CVE-2026-34986, CVE-2026-39882, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-fcv2-xgw5-pqxf, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p, ghsa-p77j-4mvh-x3m3, ghsa-w8rr-5gcm-pp58 applied in versions: 1.10.2-r0, 1.5.0-r0, 1.5.0-r1, 1.5.0-r2, 1.5.0-r3, 1.5.0-r4

Multiple security vulnerabilities affect the tekton-pipelines package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UG89030 Security fixes for CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-34986, CVE-2026-39882, ghsa-78h2-9frx-2jm8, ghsa-9h8m-3fm2-qjrq, ghsa-f6x5-jh6r-wrfv, ghsa-fcv2-xgw5-pqxf, ghsa-j5w8-q4qc-rx2x, ghsa-p436-gjf2-799p, ghsa-w8rr-5gcm-pp58 applied in versions: 1.11.0-r0, 1.5.0-r0, 1.5.0-r1, 1.5.0-r2, 1.5.0-r3, 1.5.0-r4

Multiple security vulnerabilities affect the tekton-pipelines package. These issues are resolved in later releases. See references for individual vulnerability details...