VDB
KO

GO-2026-5486

Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

Quick fix

GO-2026-5486 — github.com/tektoncd/pipeline: upgrade to the fixed version with the command below.

go get github.com/tektoncd/pipeline@v1.0.2

Details

Tekton Pipelines HTTP resolver denial of service via memory exhaustion in github.com/tektoncd/pipeline

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/tektoncd/pipeline
Introduced in: 1.0.0 Fixed in: 1.0.2
Fix go get github.com/tektoncd/pipeline@v1.0.2

References