github.com/openshift-pipelines/pipelines-as-code vulnerabilities (Go)

2 vulnerabilities.

• github.com/openshift-pipelines/pipelines-as-code Go Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution CVE-2026-54168 Fix available 6.5 MediumAugust 20, 2026
• github.com/openshift-pipelines/pipelines-as-code Go Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header CVE-2026-54167 Fix available 8.2 HighAugust 20, 2026