Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

pipeline — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in pipeline, with AI-generated Chinese analysis, references, and POCs.

Vendor: tektoncd

CVE IDTitleCVSSSeverityPublished
CVE-2026-40923 Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check CWE-22 5.4 Medium2026-04-21
CVE-2026-40924 Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion CWE-400 6.5 Medium2026-04-21
CVE-2026-40938 Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE CWE-88 7.5 High2026-04-21
CVE-2026-40161 Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL CWE-201 7.7 High2026-04-21
CVE-2026-25542 Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching CWE-185 6.5 Medium2026-04-21
CVE-2026-33211 Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod CWE-22 9.6 Critical2026-03-23
CVE-2026-33022 Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun CWE-129 6.5 Medium2026-03-20
CVE-2023-37264 Pipelines do not validate child UIDs CWE-345 3.7 Low2023-07-07

All 8 known CVE vulnerabilities affecting pipeline with full Chinese analysis, references, and POCs where available.