tektoncd pipelines-as-code vulnerabilities
2 published CVEs name tektoncd pipelines-as-code among the affected products.
- 2Published CVEs2 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-54167
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header
tektoncd · pipelines-as-code
High8.2 - CVE-2026-54168
Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution
tektoncd · pipelines-as-code
Medium6.5