github.com/openshift-pipelines/pipelines-as-code
Pipelines-as-Code for Tekton
View on Github
Activity
- Latest release
- 3d ago
- Total releases
- 63
- Cadence
- ~18 days
- Last 12 months
- 28
Reach
- Stars
- 212
Details
- First release
- Jul 18, 2022
| Version | Released | |
|---|---|---|
v0.42.4
patch
|
v0.42.4
patch
Dependencies (46)
+ 38 more |
|
v0.51.0
minor
|
v0.51.0
minor
Dependencies (55)
+ 47 more |
|
v0.50.0
minor
|
v0.50.0
minor
Dependencies (53)
+ 45 more |
|
v0.48.1
patch
|
v0.48.1
patch
Dependencies (50)
+ 42 more |
|
v0.42.3
patch
|
v0.42.3
patch
Dependencies (46)
+ 38 more |
|
v0.49.0
minor
|
v0.49.0
minor
Dependencies (52)
+ 44 more |
|
v0.42.2
patch
|
v0.42.2
patch
Dependencies (46)
+ 38 more |
|
v0.37.8
patch
|
v0.37.8
patch
Dependencies (43)
+ 35 more |
|
v0.39.7
patch
|
v0.39.7
patch
Dependencies (46)
+ 38 more |
|
v0.39.6
patch
|
v0.39.6
patch
Dependencies (46)
+ 38 more |
|
v0.48.0
minor
|
v0.48.0
minor
Dependencies (50)
+ 42 more |
|
v0.47.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.47.0
minor
Dependencies (50)
+ 42 more |
|
v0.46.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.46.0
minor
Dependencies (49)
+ 41 more |
|
v0.42.1
minor
|
v0.42.1
minor
Dependencies (46)
+ 38 more |
|
v0.45.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.45.0
minor
Dependencies (47)
+ 39 more |
|
v0.44.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.44.0
minor
Dependencies (47)
+ 39 more |
|
v0.43.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.43.0
minor
Dependencies (46)
+ 38 more |
|
v0.42.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.42.0
minor
Dependencies (46)
+ 38 more |
|
v0.37.6
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.37.6
patch
Dependencies (43)
+ 35 more |
|
v0.39.5
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.39.5
patch
Dependencies (46)
+ 38 more |
|
v0.39.4
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.39.4
patch
Dependencies (46)
+ 38 more |
|
v0.41.1
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.41.1
patch
Dependencies (46)
+ 38 more |
|
v0.41.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.41.0
minor
Dependencies (46)
+ 38 more |
|
v0.40.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.40.0
minor
Dependencies (46)
+ 38 more |
|
v0.39.3
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.39.3
patch
Dependencies (46)
+ 38 more |
|
v0.39.1
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.39.1
patch
Dependencies (46)
+ 38 more |
|
v0.39.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.39.0
minor
Dependencies (46)
+ 38 more |
|
v0.37.1
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.37.1
minor
Dependencies (43)
+ 35 more |
|
v0.38.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.38.0
minor
Dependencies (46)
+ 38 more |
|
v0.35.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.35.0
minor
Dependencies (43)
+ 35 more |
|
v0.34.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.34.0
minor
Dependencies (44)
+ 36 more |
|
v0.32.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.32.0
minor
Dependencies (46)
+ 38 more |
|
v0.28.2
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.28.2
patch
Dependencies (44)
+ 36 more |
|
v0.29.1
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.29.1
patch
Dependencies (44)
+ 36 more |
|
v0.31.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.31.0
minor
Dependencies (45)
+ 37 more |
|
v0.30.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.30.0
minor
Dependencies (45)
+ 37 more |
|
v0.29.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.29.0
minor
Dependencies (44)
+ 36 more |
|
v0.28.0
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.28.0
minor
Dependencies (44)
+ 36 more |
|
v0.24.7
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.24.7
patch
Dependencies (43)
+ 35 more |
|
v0.24.6
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.24.6
patch
Dependencies (43)
+ 35 more |
|
v0.24.4
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.24.4
patch
Dependencies (43)
+ 35 more |
|
v0.24.2
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.24.2
patch
Dependencies (43)
+ 35 more |
|
v0.24.1
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.24.1
minor
Dependencies (43)
+ 35 more |
|
v0.22.6
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.22.6
patch
Dependencies (43)
+ 35 more |
|
v0.22.5
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.22.5
patch
Dependencies (43)
+ 35 more |
|
v0.22.3
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.22.3
patch
Dependencies (44)
+ 36 more |
|
v0.22.2
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.22.2
minor
Dependencies (44)
+ 36 more |
|
v0.17.7
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.17.7
patch
Dependencies (41)
+ 33 more |
|
v0.17.6
patch
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.17.6
patch
Dependencies (41)
+ 33 more |
|
v0.21.3
minor
2 CVEs
CVE-2026-54168
GO-2026-6263
GHSA-6f2p-296r-cc28
Aug 25, 2026
Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Tekton Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev
CVE-2026-54167
GO-2026-6266
GHSA-f5f4-3hh4-f54m
Aug 25, 2026
Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Pipelines-as-Code GitHub App token request can be redirected via untrusted Enterprise Host header in github.com/openshift-pipelines/pipelines-as-code Fixed in
0.37.8
0.39.6
0.42.1
0.48.0
Updated Aug 26, 2026 · Source: OSV.dev |
v0.21.3
minor
Dependencies (42)
+ 34 more |