VDB
GO-2026-4730
GO-2026-4730
PUBLISHED
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | tekton-pipelines-1.11 | *, *, * |
| chainguard | tekton-chains-fips | 0, 0, 0 |
| chainguard | tekton-pipelines-fips-1.9 | 0, 0, 0 |
| chainguard | tekton-pipelines-fips-1.12 | *, *, * |
| chainguard | tekton-pipelines-1.13 | *, *, * |
| wolfi | tekton-pipelines-1.9 | 0, 0, 0 |
| chainguard | tekton-chains | 0, 0, 0 |
| chainguard | tkn-fips | 0, 0, 0 |
| chainguard | tekton-pipelines-fips-1.11 | *, *, * |
| chainguard | tekton-pipelines-fips-1.13 | *, *, * |
| github.com | tektoncd/pipeline | 1.10.0, 0.60.0, 0.60.0 |
| wolfi | tekton-pipelines-1.10 | 0, 0, 0 |
| chainguard | tekton-pipelines-1.4 | 0, 0, 0 |
| chainguard | tekton-pipelines-1.9 | 0, 0, 0 |
| chainguard | tekton-pipelines-fips-1.3 | 0, 0, 0 |
| wolfi | tekton-chains | 0, 0, 0 |
| chainguard | tekton-pipelines-1.12 | *, *, * |
| wolfi | tekton-pipelines-1.13 | *, *, * |
| chainguard | tekton-pipelines-1.10 | 0, 0, 0 |
| chainguard | tkn | 0, 0, 0 |
…and 10 more
Timeline
- Mar 23, 2026 CVE Published
- Jul 23, 2026 CVE Updated
References
- https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj advisory
- https://github.com/tektoncd/pipeline/commit/5eead3f859b9 patch
- https://github.com/tektoncd/pipeline/commit/01673237c464 patch
- https://github.com/tektoncd/pipeline/commit/edc64bbf2232 patch
- https://github.com/tektoncd/pipeline/commit/0fa2d66cff81 patch
- https://github.com/tektoncd/pipeline/commit/5e4905fb6754 patch
- https://github.com/tektoncd/pipeline/commit/ebc197e2b973 patch