Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

Tekton Pipelines v0.39.6 Patch: Fixes CVE-2026-33186, GHSA-78f2, CVE-2026-40161

github.com 2026-09-15 查看中文 →

Security Advisory CVE-2026-33186 Unknown Tekton

Affected:

Tekton Pipelines as Code v0.39.x
go-jose v1.x
go-jose v3
go-jose v4
Tekton Pipeline <v1.6.2

Fixed in:

Tekton Pipelines as Code v0.39.6
go-jose v1.79.3
go-jose v3 (patched)
go-jose v4 (patched)
Tekton Pipeline v1.6.2

Referenced CVEs: CVE-2026-54167 · 8.2 CVE-2026-54168 · 6.5

文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive

This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.

More from this source

libp2p-quick Expired Certificate Panic Vulnerability GHSA-9shw-3n7g Fix & Regression Test 2026-09-16 libp2p-quic Remote DoS via Certificate Expiry Race Condition (CVE-2025-63341) 2026-09-16 Netmaker SQLite SQL Injection Vulnerability Analysis (CVE-2025-25399) 2026-09-16 Akka HTTP/2: Missing Oversized Frame Validation Leading to Memory Exhaustion 2026-09-16 rust-libp2p: fix panic on post-handshake cert validation (GHSA-8qhw-3q4w-jq7h) 2026-09-16

Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro