pipelines-as-code vulnerabilities

1 known vulnerability in pipelines-as-code from Tektoncd. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  pipelines-as-code: Insufficient Verification of Data Authenticity

  CVE-2026-54167Sep 15, 2026Tektoncd

  Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, the GitHub App provider accepts X-GitHub-Enterprise-Host as the API host while processing webhook events conta