VDB

GO-2023-1901

GO-2023-1901 PUBLISHED

Pipelines do not validate child UIDs in github.com/tektoncd/pipeline

Affected Products

VendorProductVersions
chainguardtekton-pipelines-fips-1.4*, *
chainguardtekton-pipelines-fips-1.70, 0
wolfitekton-pipelines-1.11*, *, *
chainguardtekton-pipelines-fips-1.12*, *
github.comtektoncd/pipeline0.35.0, 0.35.0
chainguardtekton-pipelines-fips-1.6*, *
chainguardtekton-pipelines-1.9*, *
chainguardtekton-pipelines-1.12*, *
chainguardtekton-pipelines-fips-1.10*, *
wolfitkn*, *, *
chainguardtkn*, *
chainguardtekton-pipelines-1.6*, *
chainguardtekton-chains-fips*, *
chainguardtekton-pipelines-fips-1.3*, *
chainguardtekton-pipelines-fips-0.680, 0
chainguardtekton-chains*, *
chainguardtekton-pipelines-fips-1.0*, *
chainguardtekton-pipelines-1.7*, *
wolfitekton-pipelines-1.9*, *, *
chainguardtekton-pipelines-1.13*, *

…and 16 more

Timeline

  • Aug 20, 2024 CVE Published
  • Feb 4, 2026 CVE Updated
  • May 18, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›