GO-2023-1901 Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Pipelines do not validate child UIDs in github.com/tektoncd/pipeline...

Authorization Bypass

github.com/tektoncd/pipeline is vulnerable to Authorization Bypasses. The Pipelines do not check child UIDs, therefore users who have permission to create TaskRuns are able to create their own tasks, tricking the controller into linking irrelevant runs to the pipeline, feeding data through the...