202 matches found
GHSA-2HW4-C9M4-F2FJ vulnerabilities
Vulnerabilities for packages: tekton-pipelines, kserve, traefik, sigstore-scaffolding...
GHSA-2HW4-C9M4-F2FJ vulnerabilities
Vulnerabilities for packages: kserve, traefik, tekton-pipelines, kserve-localmodelnode-agent, tekton-pipelines-fips, kserve-fips, sigstore-scaffolding, sigstore-scaffolding-fips, kserve-localmodelnode-agent-fips, traefik-fips...
trust-software-supply-chain-poc
Trusted Software Supply Chain — Proof of Concept This proof-...
GHSA-VP52-PCJ8-J9QC vulnerabilities
Vulnerabilities for packages: drone-fips, conftest-fips, crossplane-provider-aws-resourcegroups, frankenphp-8.3, crossplane-provider-aws-redshift-fips, crossplane-provider-azure-keyvault, containerd, gotrue-fips, crossplane-provider-aws-s3control, hydra-fips, apm-server-fips, eksctl, nomad,...
CVE-2026-84304 vulnerabilities
Vulnerabilities for packages: drone-fips, conftest-fips, crossplane-provider-aws-resourcegroups, frankenphp-8.3, crossplane-provider-aws-redshift-fips, crossplane-provider-azure-keyvault, containerd, gotrue-fips, crossplane-provider-aws-s3control, hydra-fips, apm-server-fips, eksctl, nomad,...
GO-2026-6225 vulnerabilities
Vulnerabilities for packages: kaniko, tekton-pipelines, crossplane-fips, knative-serving, tekton-pipelines-fips, knative-serving-fips, docker-credential-acr-env-fips, kaniko-fips, kubeflow-katib, docker-credential-acr-env, crossplane, security-profiles-operator...
GO-2026-6225 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, crossplane, kubeflow-katib, kaniko, knative-serving, docker-credential-acr-env...
CLEANSTART-2026-IW88811 Security fixes in tekton-pipelines-fips 1.13.1-r1
Package tekton-pipelines-fips version 1.13.1-r1 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...
CLEANSTART-2026-WE59160 Security fixes in tekton-pipelines-fips 1.14.0-r4
Package tekton-pipelines-fips version 1.14.0-r4 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...
CLEANSTART-2026-KH43508 Security fixes in tekton-pipelines-fips 1.13.1-r2
Package tekton-pipelines-fips version 1.13.1-r2 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution
Impact When Pipelines-as-Code is configured with a GitHub App installed across multiple repositories, the installation token issued during webhook processing is not scoped to the triggering repository by default. The token retains access to all repositories in the GitHub App installation. This...
GO-2026-6094 vulnerabilities
Vulnerabilities for packages: kyverno, caddy, cloud-provider-aws, fluent-operator, cilium, crossplane, external-secrets-operator, tetragon, cluster-api, apisix-ingress-controller, argocd-image-updater, cloud-provider-gcp-cloud-controller-manager, kubernetes-csi-external-snapshotter,...
GO-2026-5711 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains, tkn, tekton-chains-fips, tkn-fips...
GO-2026-5272 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains, tkn, tekton-chains-fips, tkn-fips...
GO-2026-4730 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains, tkn, tekton-chains-fips, tkn-fips...
GO-2026-5643 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains, tkn, tekton-chains-fips, tkn-fips...
GO-2026-5486 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains, tkn, tekton-chains-fips, tkn-fips...
GO-2026-5630 vulnerabilities
Vulnerabilities for packages: tekton-pipelines, tekton-pipelines-fips, tekton-chains, tkn, tekton-chains-fips, tkn-fips...