GHSA-VP52-PCJ8-J9QC vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-aws-serverlessrepo, volsync, velero-plugin-for-aws, distribution-fips, grafana-alloy, crossplane-provider-aws-datapipeline, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator-fips, rancher-webhook,...

CVE-2026-84304 vulnerabilities

Vulnerabilities for packages: gitlab-runner-fips, crossplane-provider-aws-serverlessrepo, volsync, velero-plugin-for-aws, distribution-fips, grafana-alloy, crossplane-provider-aws-datapipeline, gcp-compute-persistent-disk-csi-driver, victoriametrics-operator-fips, rancher-webhook,...

GO-2026-6225 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, crossplane, tekton-pipelines-fips, knative-serving, knative-serving-fips, tekton-pipelines, crossplane-fips...

GO-2026-6225 vulnerabilities

Vulnerabilities for packages: crossplane, kubeflow-katib, tekton-pipelines, knative-serving...

CLEANSTART-2026-WE59160 Security fixes in tekton-pipelines-fips 1.14.0-r4

Package tekton-pipelines-fips version 1.14.0-r4 fixes 9 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

CLEANSTART-2026-KH43508 Security fixes in tekton-pipelines-fips 1.13.1-r2

Package tekton-pipelines-fips version 1.13.1-r2 fixes 8 vulnerabilities: CVE-2026-39821, CVE-2026-33818, CVE-2026-46600, CVE-2026-56853, CVE-2026-56858...

Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution

Impact When Pipelines-as-Code is configured with a GitHub App installed across multiple repositories, the installation token issued during webhook processing is not scoped to the triggering repository by default. The token retains access to all repositories in the GitHub App installation. This...

GO-2026-6094 vulnerabilities

Vulnerabilities for packages: cloud-provider-gcp-cloud-controller-manager, kwok, metallb, opentelemetry-operator, cilium, tekton-chains, k3s, hubble, kube-state-metrics, kubescape-operator, openfga, kuma, spqr, kubescape, k8ssandra-client, cluster-api-ipam-provider-in-cluster, fluent-operator, zo...

GO-2026-5711 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2026-5272 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2026-5486 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2026-4730 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2026-5643 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2026-5630 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2023-1901 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

GO-2026-4761 vulnerabilities

Vulnerabilities for packages: tkn, tekton-pipelines-fips, tekton-chains-fips, tekton-chains, tekton-pipelines, tkn-fips...

GO-2026-4761 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...

GO-2026-5630 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...

GO-2026-5643 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...

GO-2026-5711 vulnerabilities

Vulnerabilities for packages: tekton-pipelines, tekton-chains, tkn...