CVE-2026-49834 vulnerabilities

Vulnerabilities for packages: kubescape, trivy-fips, cloudbeat-fips, falcoctl-fips, aactl, tkn-fips, policy-controller, ratify, tekton-chains-fips, neuvector-sigstore-interface-fips, image-factory-fips, spire-server-fips, policy-controller-fips, zarf, crossplane-fips, falcoctl, tkn, trivy-operato...

GHSA-9VCR-P3RJ-Q5Q6 vulnerabilities

Vulnerabilities for packages: kubescape, trivy-fips, cloudbeat-fips, falcoctl-fips, aactl, tkn-fips, policy-controller, ratify, tekton-chains-fips, neuvector-sigstore-interface-fips, image-factory-fips, spire-server-fips, policy-controller-fips, zarf, crossplane-fips, falcoctl, tkn, trivy-operato...

CVE-2026-49478 vulnerabilities

Vulnerabilities for packages: flux-source-controller, podman, slsa-verifier, undock, zarf, gitsign, ratify, buildah, witness, kyverno, tekton-chains, aactl, skopeo, kots, kyverno-notation-aws, falcoctl, kubescape...

GHSA-F5MR-Q85P-6HH6 vulnerabilities

Vulnerabilities for packages: flux-source-controller, podman, slsa-verifier, undock, zarf, gitsign, ratify, buildah, witness, kyverno, tekton-chains, aactl, skopeo, kots, kyverno-notation-aws, falcoctl, kubescape...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, knative-serving-fips, prometheus-operator, external-dns, traefik, zot, zarf, nemo, cilium-cli, frankenphp-8.4, cilium, reports-server, flux-fips, drone, knative-kafka-broker, minio,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, knative-serving-fips, prometheus-operator, external-dns, traefik, zot, zarf, nemo, cilium-cli, frankenphp-8.4, cilium, reports-server, flux-fips, drone, knative-kafka-broker, minio,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, kubevela-fips, cloudbeat-fips, containerd, terraform-provider-azurerm, crossplane-provider-azure-purview, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-dynamodb, splunk-otel-collector-fips, gitlab-cng-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, prometheus-podman-exporter-fips, pulumi-language-java, step, knative-serving-fips, prometheus-operator, external-dns, traefik, dagger, go-discover-fips, gptscript, zot, argo-events,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, prometheus-podman-exporter-fips, pulumi-language-java, knative-serving-fips, prometheus-operator, external-dns, traefik, dagger, gptscript, zot, argo-events, external-secrets-operator...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: skaffold, fscrypt, frankenphp-8.5, kubevela-fips, cloudbeat-fips, containerd, kuma, prometheus-podman-exporter-fips, pulumi-language-java, knative-serving-fips, longhorn-manager, external-dns, prometheus-operator, dagger, traefik, gptscript, zot, argo-events,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: fscrypt, frankenphp-8.5, containerd, kuma, knative-serving-fips, prometheus-operator, external-dns, traefik, zot, nemo, cilium-cli, frankenphp-8.4, cilium, reports-server, knative-kafka-broker, minio, argo-workflows-fips, etcd-fips, argo-workflows, mattermost-fips,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: fscrypt, frankenphp-8.5, containerd, kuma, knative-serving-fips, prometheus-operator, external-dns, traefik, zot, nemo, cilium-cli, frankenphp-8.4, cilium, reports-server, knative-kafka-broker, minio, argo-workflows-fips, etcd-fips, argo-workflows, mattermost-fips,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: prometheus-podman-exporter-fips, kubevela-fips, cloudbeat-fips, containerd, terraform-provider-azurerm, crossplane-provider-azure-purview, crossplane-provider-aws-organizations-fips, crossplane-provider-aws-dynamodb, splunk-otel-collector-fips, gitlab-cng-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: k9s, ko, knative-serving, dagger, cert-manager, loki, caddy, apko, scorecard, rancher-agent, kubernetes-dashboard, policy-controller, witness, gh, terragrunt, k8sgpt, opentelemetry-collector, syft, docker, flux-image-automation-controller, containerd,...

GO-2026-5272 Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE in github.com/tektoncd/pipeline

Tekton Pipeline: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE in github.com/tektoncd/pipeline...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

EUVD-2026-34248

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...