Red Hat Security Advisory

RHSA-2026:26519

Red Hat OpenShift Pipelines Release 1.21.2

Released 2026-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Pipelines 1.21 registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9, registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9, registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator

TI-2026-29590 CVE-2026-40938 · GHSA-94jr-7pqp-xhcq

HIGH 72

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00788 Published 2026-04-21 Partial fix · 1.0.2, 1.3.4 +3 CWE-88

TI-2026-26188 CVE-2026-33816 · GHSA-9jj7-4m8r-rfcm

MEDIUM 50

Memory-safety vulnerability in github.com/jackc/pgx/v5.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00583 Published 2026-04-07 Partial fix · 5.9.0 CWE-20

TI-2026-25614 CVE-2026-33186 · GHSA-p77j-4mvh-x3m3

MEDIUM 49

gRPC-Go is the Go language implementation of gRPC.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01619 Published 2026-03-20 Partial fix · 1.79.3 CWE-285

TI-2026-21591 CVE-2026-27141 · GHSA-8fj7-8h3w-xwfm

MEDIUM 40

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00569 Published 2026-02-26 Partial fix · 0.51.0 CWE-476