Red Hat OpenShift Pipelines
5 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-10840 | | Openshift-pipelines-operator-rh: openshift-pipelines-operator: tekton-scheduler-rolebinding grants system:authenticated write access to k… | HIGH 7.1 | 0.2 % | ||
| CVE-2025-11065 | | Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure | MEDIUM 5.3 | 0.4 % | ||
| CVE-2025-8556 | | Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results | LOW 3.7 | 0.5 % | ||
| CVE-2024-11831 | | Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript | MEDIUM 5.4 | 1.1 % | ||
| CVE-2024-9355 | | Golang-fips: golang fips zeroed buffer | MEDIUM 6.5 | 0.3 % |