—
GO-2026-4730
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline
Quick fix
GO-2026-4730 — github.com/tektoncd/pipeline: upgrade to the fixed version with the command below.
go get github.com/tektoncd/pipeline@v1.0.1Details
Tekton Pipelines controller panic via long resolver name in TaskRun/PipelineRun in github.com/tektoncd/pipeline
Are you affected?
Enter the version of the package you're using.
Affected packages
Go / github.com/tektoncd/pipeline
Introduced in:
0.60.0 Fixed in: 1.0.1 Fix
go get github.com/tektoncd/pipeline@v1.0.1 References
- https://github.com/tektoncd/pipeline/security/advisories/GHSA-cv4x-93xx-wgfj [ADVISORY]
- https://github.com/tektoncd/pipeline/commit/5eead3f859b9 [FIX]
- https://github.com/tektoncd/pipeline/commit/01673237c464 [FIX]
- https://github.com/tektoncd/pipeline/commit/edc64bbf2232 [FIX]
- https://github.com/tektoncd/pipeline/commit/0fa2d66cff81 [FIX]
- https://github.com/tektoncd/pipeline/commit/5e4905fb6754 [FIX]
- https://github.com/tektoncd/pipeline/commit/ebc197e2b973 [FIX]