{"action":"Upgrade github.com/tektoncd/pipeline to 1.0.1 or later.","affected":[{"fixed":"1.0.1","introduced":"1.0.0"},{"fixed":"1.3.3","introduced":"1.1.0"},{"fixed":"1.6.1","introduced":"1.4.0"},{"fixed":"1.9.2","introduced":"1.7.0"},{"fixed":"1.11.1","introduced":"1.10.0"}],"component":"github.com/tektoncd/pipeline","cve_ids":["CVE-2026-33211"],"ecosystem":"Go","epss":0.00729,"exploited":false,"fixed_versions":["1.0.1","1.3.3","1.6.1","1.9.2","1.11.1"],"ghsa_id":"GHSA-j5q5-j9gm-2w5c","id":"tcs_01M5KGFXWWWDH6R4CG5FHM1DBD","modified_at":"2026-07-23T19:15:15.723840271Z","published_at":"2026-03-23T18:14:51Z","references":["https://osv.dev/vulnerability/GO-2026-4761","https://github.com/tektoncd/pipeline/security/advisories/GHSA-j5q5-j9gm-2w5c"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"GO-2026-4761","url":"https://osv.dev/vulnerability/GO-2026-4761"}],"summary":"Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline"}