GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, vault-fips, frankenphp-8.3, mattermost, frankenphp-8.4, grafana-fips, rancher, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server, commercial-expanso-edge, kube-state-metrics,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, vault-fips, frankenphp-8.3, mattermost, docker-machine-driver-harvester, frankenphp-8.4, grafana-fips, rancher, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server,...

GHSA-78MQ-XCR3-XM33 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, packer, vault-fips, frankenphp-8.3, mattermost, frankenphp-8.4, grafana-fips, chainloop-cli-fips, osv-scanner, zarf-fips, minio-fips, reports-server, spire-server, commercial-expanso-edge,...

GHSA-Q4H4-GMJ2-QVW2 vulnerabilities

Vulnerabilities for packages: cilium-cli, kyverno-policy-reporter-plugins-kyverno, datadog-agent-fips, docker-fips, crossplane-provider-aws-elasticsearch-fips, vault-fips, cloudflared-fips, mattermost, crossplane-provider-aws-firehose-fips, rancher, zarf-fips, reports-server, spire-server,...

GHSA-RM3J-F69W-WQMQ vulnerabilities

Vulnerabilities for packages: cilium-cli, kyverno-policy-reporter-plugins-kyverno, datadog-agent-fips, docker-fips, crossplane-provider-aws-elasticsearch-fips, vault-fips, cloudflared-fips, mattermost, crossplane-provider-aws-firehose-fips, rancher, zarf-fips, reports-server, spire-server,...

GHSA-9M57-25V3-79X9 vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, commercial-grafana, kaf, packer, vault-fips, frankenphp-8.3, mattermost, frankenphp-8.4, grafana-fips, rancher, reports-server, spire-server, commercial-expanso-edge, kube-state-metrics, gitlab-kas, kubernetes, kube-conformance,...

GHSA-JPPX-RXG9-JMRX vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, commercial-grafana, kaf, vault-fips, frankenphp-8.3, mattermost, frankenphp-8.4, grafana-fips, rancher, reports-server, spire-server, commercial-expanso-edge, kube-state-metrics, gitlab-kas, kubernetes, kube-conformance, docker-cli-buildx-fips,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, flux-source-controller-fips, commercial-grafana, kaf, packer, vault-fips, frankenphp-8.3, mattermost, docker-machine-driver-harvester, frankenphp-8.4, grafana-fips, chainloop-cli-fips, rancher, osv-scanner, zarf-fips, reports-server,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: cilium-cli, etcd-fips, longhorn-cli, datadog-agent-fips, flux-source-controller-fips, commercial-grafana, kaf, docker-fips, packer, vault-fips, longhorn-manager, frankenphp-8.3, mattermost, docker-machine-driver-harvester, frankenphp-8.4, grafana-fips,...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: act, helm, cosign, wolfictl, splunk-otel-collector, argo-cd, kargo, gitea, rootlesskit, docker-cli-buildx, flux-notification-controller, openbao, buildkitd, cloud-provider-aws, pulumi-language-yaml, eksctl, external-dns, pulumi-language-dotnet, kubernetes, podman,...

GO-2026-5643 Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline

Tekton Pipelines VolumeMount path restriction bypass via missing filepath.Clean in github.com/tektoncd/pipeline...

GO-2026-5711 Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline

Tekton Pipelines git resolver leaks API token to user-controlled serverURL in github.com/tektoncd/pipeline...

GO-2026-5630 Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline

Tekton Pipelines has VerificationPolicy regex pattern bypass via substring matching in github.com/tektoncd/pipeline...

GO-2026-5486 Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline...

GO-2026-5272 Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline

Tekton Pipelines git resolver revision parameter argument injection in github.com/tektoncd/pipeline...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines-fips, tekton-pipelines...

CVE-2023-37264 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

GHSA-W2H3-VVVQ-3M53 vulnerabilities

Vulnerabilities for packages: tekton-pipelines...

CVE-2026-10840 Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources

A flaw was found in the OpenShift Pipelines operator. The tekton-scheduler-rolebinding ClusterRoleBinding grants the system:authenticated group write access to Kueue and cert-manager custom resources via the tekton-scheduler-role ClusterRole. When Kueue or cert-manager CRDs are present on the...