github.com/tektoncd/pipeline vulnerabilities (Go)
8 vulnerabilities.
-
github.com/tektoncd/pipelineGo Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE 7.5 High -
github.com/tektoncd/pipelineGo Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion 6.5 Medium -
github.com/tektoncd/pipelineGo Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check 5.4 Medium -
github.com/tektoncd/pipelineGo Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL 7.7 High -
github.com/tektoncd/pipelineGo Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching 6.5 Medium -
github.com/tektoncd/pipelineGo Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod 9.6 Critical -
github.com/tektoncd/pipelineGo Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun 6.5 Medium -
github.com/tektoncd/pipelineGo Pipelines do not validate child UIDs 3.7 Low