tocsin

Go/github.com/tektoncd/pipeline CVE-2026-33211: unknown, EPSS 0.58%

Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

Action: Upgrade github.com/tektoncd/pipeline to 1.0.1 or later.

go get github.com/tektoncd/pipeline@v1.0.1
go get github.com/tektoncd/pipeline@v1.3.3
go get github.com/tektoncd/pipeline@v1.6.1
go get github.com/tektoncd/pipeline@v1.9.2
go get github.com/tektoncd/pipeline@v1.11.1

Affected

introducedfixedlast affected
1.0.01.0.1-
1.1.01.3.3-
1.4.01.6.1-
1.7.01.9.2-
1.10.01.11.1-

Fixed versions

1.0.11.3.31.6.11.9.21.11.1

Sources

CVE-2026-33211 · published · modified · JSON