Red Hat Security Advisory

RHSA-2026:26538

Red Hat OpenShift Pipelines Release 1.21.2

Released 2026-06-17 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift Pipelines 1.21 registry.redhat.io/openshift-pipelines/pipelines-operator-bundle

TI-2026-29590 CVE-2026-40938 · GHSA-94jr-7pqp-xhcq

HIGH 72

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00788 Published 2026-04-21 Partial fix · 1.0.2, 1.3.4 +3 CWE-88

TI-2026-21591 CVE-2026-27141 · GHSA-8fj7-8h3w-xwfm

MEDIUM 40

Due to missing nil check, sending 0x0a-0x0f HTTP/2 frames will cause a running server to panic

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00569 Published 2026-02-26 Partial fix · 0.51.0 CWE-476