Red Hat Security AdvisoryRHSA-2026:24484
Red Hat OpenShift Pipelines Release 1.21.2
Released 2026-06-08 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift Pipelines 1.21 serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_darwin, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_windows +5
Fixes 5 records
Priority HIGH 72
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.
CVSS 3.1HIGH 8.5· Network · Low privileges · No interaction · EPSS 0.00788 · Published 2026-04-21 · Partial fix · 1.0.2, 1.3.4 +3 CWE-88
Priority MEDIUM 49
gRPC-Go is the Go language implementation of gRPC.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01619 · Published 2026-03-20 · Partial fix · 1.79.3 CWE-285
Priority MEDIUM 42
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.
CVSS 3.1CRITICAL 9.6· Network · Low privileges · No interaction · EPSS 0.00583 · Published 2026-03-23 · Partial fix · 1.0.1, 1.3.3 +3 CWE-22
Priority MEDIUM 40
Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00663 · Published 2026-04-06 · Partial fix · 4.1.4, 3.0.5 CWE-248
Priority LOW 33
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.
CVSS 3.1HIGH 7.7· Network · Low privileges · No interaction · EPSS 0.0026 · Published 2026-04-21 · Partial fix · 1.0.2, 1.3.4 +3 CWE-201
THREATIST.IORead the docs