Product by Go
Github.com/tektoncd/pipeline
8 known vulnerabilities in Github.com/tektoncd/pipeline (Go), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-40938 | Tektoncd Pipeline: Argument Injection | 8.5 | |
| Critical | CVE-2026-33211 | Tektoncd Pipeline: Path Traversal | 9.6 | |
| Medium | CVE-2026-33022 | Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun | 6.5 | |
| Medium | CVE-2026-40924 | Tektoncd Pipeline: Uncontrolled Resource Consumption | 6.5 | |
| Medium | CVE-2026-25542 | Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching | 6.5 | |
| High | CVE-2026-40161 | Tektoncd Pipeline: Insertion of Sensitive Information Into Sent Data | 6.5 | |
| Medium | CVE-2026-40923 | Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check | 5.4 | |
| Medium | CVE-2023-37264 | Pipelines do not validate child UIDs | 3.7 |