Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod

Invoking auth bypass via unenforced @revoked status in golang.org/x/crypto/ssh/knownhosts

Invoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/ssh

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to kueue and cert-manager resources

Inefficient candidate hostname parsing in crypto/x509

Invoking bypass of certificate restrictions in golang.org/x/crypto/ssh

Invoking server panic during CheckHostKey/Authenticate in golang.org/x/crypto/ssh