VDB
KO

GO-2026-4761

Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

Quick fix

GO-2026-4761 — github.com/tektoncd/pipeline: upgrade to the fixed version with the command below.

go get github.com/tektoncd/pipeline@v1.0.1

Details

Path traversal in Tekton Pipelines git resolver in github.com/tektoncd/pipeline

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/tektoncd/pipeline
Introduced in: 1.0.0 Fixed in: 1.0.1
Fix go get github.com/tektoncd/pipeline@v1.0.1

References