VDB

GO-2023-1901

GO-2023-1901 PUBLISHED

Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Affected Products

VendorProductVersions
chainguardtekton-pipelines-fips-1.4*, *, *
chainguardtekton-pipelines-fips-1.70, 0, 0
wolfitekton-pipelines-1.11*, *, *
chainguardtekton-pipelines-fips-1.12*, *, *
github.comtektoncd/pipeline0.35.0
chainguardtekton-pipelines-fips-1.6*, *, *
chainguardtekton-pipelines-1.9*, *, *
chainguardtekton-pipelines-1.12*, *, *
chainguardtekton-pipelines-fips-1.10*, *, *
wolfitkn*, *, *
chainguardtkn*, *, *
chainguardtekton-pipelines-1.6*, *, *
chainguardtekton-chains-fips*, *, *
chainguardtekton-pipelines-fips-1.3*, *, *
chainguardtekton-pipelines-fips-0.680, 0, 0
chainguardtekton-chains*, *, *
chainguardtekton-pipelines-fips-1.0*, *, *
chainguardtekton-pipelines-1.7*, *, *
wolfitekton-pipelines-1.9*, *, *
chainguardtekton-pipelines-1.13*, *, *

…and 16 more

Timeline

  • Aug 20, 2024 CVE Published
  • Feb 4, 2026 CVE Updated
  • Oct 14, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›