GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: podman, prometheus, nerdctl, kubernetes-dashboard, external-secrets-operator-fips, backup-restore-operator, opentofu, telegraf, istio, commercial-expanso-edge, nemo, docker-cli-buildx-fips, frankenphp-8.4, commercial-grafana, containerd, gitlab-rails-ce-fips,...

GO-2026-5643 Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline...

GO-2026-5711 Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline...

GO-2026-5630 Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline...

GO-2026-5486 Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline...

GHSA-64MM-VXMG-Q3VJ vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, gitlab-rails-ce-fips, gitlab-rails-ce, kubeflow-katib...

CVE-2026-55602 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, gitlab-rails-ce-fips, gitlab-rails-ce, kubeflow-katib...

GHSA-64MM-VXMG-Q3VJ vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...

CVE-2026-55602 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-katib, kubeflow-pipelines...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips...

Malicious code in respects-switch (npm)

respects-switch is a dependency confusion proof-of-concept package published to the public npm registry by the account r0binak and self-labeled "Security research PoC - Dependency Confusion Hunter". It was published at the artificially high version 999.0.0, the canonical floating-version bait use...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

GHSA-GJ48-438W-JH9V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-8RFP-98V4-MMR6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-8RFP-98V4-MMR6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, label-studio...

GHSA-GJ48-438W-JH9V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, label-studio...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.2

The 1.21.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.2 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.21.2

The 1.21.2 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.21.2 release of Red Hat OpenShift Pipelines Operator...