tektoncd güvenlik açıkları (CVE)

tektoncd için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

9 sonuç
7.5Yüksek
CVE-2026-40938

Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

tektoncd pipeline; Red Hat Red Hat OpenShift Builds 1.7.3; Red Hat Red Hat OpenShift Builds 1.8.1; Red Hat Red Hat OpenShift Pipelines 1.21

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver's revision parameter is passed directly as a positional argumen…

9.6Kritik
CVE-2026-33211

Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod

tektoncd pipeline; Red Hat Builds for Red Hat OpenShift 1.6.0; Red Hat Red Hat OpenShift Builds 1.7.3; Red Hat Red Hat OpenShift Pipelines 1.2

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathI…