Product by Red Hat
Openshift Pipelines
8 known vulnerabilities in Openshift Pipelines (Red Hat), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
1
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2024-1394 | Golang-fips/openssl: memory leaks in code encrypting and decrypting rsa payloads | 7.5 | |
| Critical | CVE-2026-33211 | Tektoncd Pipeline: Path Traversal | 9.6 | |
| Medium | CVE-2024-11831 | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | 5.4 | |
| Medium | CVE-2024-9355 | Golang-fips: golang fips zeroed buffer | 6.5 | |
| Medium | CVE-2026-33022 | Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun | 6.5 | |
| High | CVE-2026-10840 | Red Hat OpenShift Pipelines: Incorrect Permission Assignment for Critical Resource | 7.1 | |
| Medium | CVE-2025-11065 | Github.com/go-viper/mapstructure/v2: Generation of Error Message Containing Sensitive Information | 5.3 | |
| Low | CVE-2025-8556 | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | 3.7 |