Login Request a demo
PI
Product
pipeline
by tektoncd · last CVE Apr 21, 2026
7
CVEs
0
On KEV
9.6
Max CVSS
0
New 30D
Vulnerabilities7In the news0Timeline
Severity mix
Critical 1High 1Medium 5Low 0
Severity
All severities7Critical1High1Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pipeline to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33211
9.6
1%
Mar 23
Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod
Affected: >= 1.0.0, < 1.0.1; >= 1.1.0, < 1.3.3; >= 1.4.0, < 1.6.1; >= 1.7.0, < 1.9.2; >= 1.10.0, < 1.10.2
CVE-2026-40938
8.5
1%
Apr 21
Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE
Affected: >= 1.0.0, < 1.0.2; >= 1.2.0, < 1.3.4; >= 1.4.0, < 1.6.2; >= 1.7.0, < 1.9.3; >= 1.10.0, < 1.11.1
CVE-2026-40924
6.5
0%
Apr 21
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
Affected: >= 1.0.0, < 1.0.2; >= 1.2.0, < 1.3.4; >= 1.4.0, < 1.6.2; >= 1.7.0, < 1.9.3; >= 1.10.0, < 1.11.1
CVE-2026-40161
6.5
0%
Apr 21
Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL
Affected: >= 1.0.0, < 1.0.2; >= 1.2.0, < 1.3.4; >= 1.4.0, < 1.6.2; >= 1.7.0, < 1.9.3; >= 1.10.0, < 1.11.1
CVE-2026-25542
6.5
0%
Apr 21
Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching
Affected: >= 0.43.0, < 1.0.2; >= 1.2.0, < 1.3.4; >= 1.4.0, < 1.6.2; >= 1.7.0, < 1.9.3; >= 1.10.0, < 1.11.1
CVE-2026-33022
6.5
0%
Mar 20
Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun
Affected: >= 0.60.0, < 1.0.1; >= 1.1.0, < 1.3.3; >= 1.4.0, < 1.6.1; >= 1.7.0, < 1.9.2; >= 1.10.0, < 1.10.2
CVE-2026-40923
5.4
0%
Apr 21
Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check
Affected: >= 1.0.0, < 1.0.2; >= 1.2.0, < 1.3.4; >= 1.4.0, < 1.6.2; >= 1.7.0, < 1.9.3; >= 1.10.0, < 1.11.1
Showing 7