tekton-pipelines vulnerabilities

Known vulnerabilities in the tekton-pipelines package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
L CVE-2025-22872	<0.70.0-r2
L GHSA-vvgc-356p-c3xw	<0.70.0-r2
L CVE-2025-22871	<0.70.0-r1
L GHSA-g9pc-8g42-g6vq	<0.70.0-r1
L Asymmetric Resource Consumption (Amplification)	<0.69.1-r1
L GHSA-mh63-6h87-95cp	<0.69.1-r1
L GHSA-29wx-vh33-7x7r	<0.69.0-r2
L GHSA-33c5-9fx5-fvjm	<0.69.0-r2
M Open Redirect	<0.69.0-r2
L GHSA-9763-4f94-gfch	<0.69.0-r2
L Improper Handling of Exceptional Conditions	<0.69.0-r2
L CVE-2025-22868	<0.69.0-r2
L GHSA-qxp5-gwg8-xv66	<0.69.0-r2
L CVE-2025-22870	<0.69.0-r2
L CVE-2025-22869	<0.69.0-r1
L Allocation of Resources Without Limits or Throttling	<0.68.0-r2
L GHSA-c6gw-w398-hv78	<0.68.0-r2
L GHSA-3whm-j4xm-rv8x	<0.68.0-r1
L CVE-2025-22866	<0.68.0-r1
L GHSA-v725-9546-7q7m	<0.66.0-r4
L Resource Exhaustion	<0.66.0-r4
L Arbitrary Argument Injection	<0.66.0-r4
L GHSA-r9px-m959-cxf4	<0.66.0-r4
L CVE-2024-45338	<0.66.0-r3
L GHSA-w32m-9786-jp63	<0.66.0-r3
L CVE-2024-45337	<0.66.0-r1
L GHSA-v778-237x-gjrc	<0.66.0-r1
L CVE-2024-34158	<0.63.0-r1
L CVE-2024-34156	<0.63.0-r1
L GHSA-j7vj-rw65-4v26	<0.63.0-r1
L CVE-2024-34155	<0.63.0-r1
L GHSA-crqm-pwhx-j97f	<0.63.0-r1
L GHSA-8xfx-rj4p-23jm	<0.63.0-r1
L CVE-2024-41110	<0.62.0-r1
L GHSA-v23v-6jw2-98fq	<0.62.0-r1
L GHSA-xr7q-jx4m-x55m	<0.61.1-r1
L CVE-2024-24791	<0.61.0-r1
L GHSA-hw49-2p59-3mhj	<0.61.0-r1
M Information Exposure Through Log Files	<0.60.2-r2
L GHSA-v6v8-xj6m-xwqh	<0.60.2-r2
M Race Condition	<0.60.2-r1
L GHSA-m5vv-6r4h-3vj9	<0.60.2-r1
M CVE-2024-24789	<0.60.1-r1
L GHSA-236w-p7wf-5ph8	<0.60.1-r1
C CVE-2024-24790	<0.60.1-r1
L GHSA-49gw-vxvf-fc2g	<0.60.1-r1
L CVE-2024-24788	<0.59.0-r2
L CVE-2024-24787	<0.59.0-r2
L GHSA-2jwv-jmq4-4j3r	<0.59.0-r2
L GHSA-5fq7-4mxc-535h	<0.59.0-r2
L GHSA-x84c-p2g9-rqv9	<0.59.0-r1
L CVE-2024-32473	<0.59.0-r1
L GHSA-4v7x-pqxf-cx7m	<0.58.0-r2
L CVE-2023-45288	<0.58.0-r2
H Origin Validation Error	<0.58.0-r1
L GHSA-xw73-rw38-6vjc	<0.58.0-r1
L CVE-2024-28180	<0.57.0-r0
L CVE-2024-24786	<0.57.0-r1
L GHSA-8r3f-844c-mc37	<0.57.0-r1
L GHSA-c5q2-7r4c-mv6g	<0.57.0-r0
L GHSA-5pf6-2qwx-pxm2	<0.57.0-r0
L CVE-2024-28110	<0.57.0-r0
H CVE-2023-49568	<0.55.0-r2
L GHSA-mw99-9chc-xw7r	<0.55.0-r2
M Improper Validation of Integrity Check Value	<0.54.2-r1
L GHSA-7ww5-4wqc-m92c	<0.54.2-r1
L GHSA-45x7-px36-x8w8	<0.54.2-r1
L GHSA-jq35-85cj-fj4p	<0.54.0-r2
L GHSA-2c7c-3mj9-8fqh	<0.54.0-r2

Vulnerability

Vulnerable Version

<0.70.0-r2

<0.70.0-r2

<0.70.0-r1

<0.70.0-r1

Asymmetric Resource Consumption (Amplification)

<0.69.1-r1